Comments (5)
This would seem to be issue in libjpeg and not in jpegoptim?
from jpegoptim.
@tjko thanks, I have reported the issue to libjpeg-turbo
, wait for their reply
from jpegoptim.
referring the comment,
https://github.com/libjpeg-turbo/libjpeg-turbo/security/advisories/GHSA-mm58-28hq-3c32#advisory-comment-93367
It will check with the latest jpegoptim version of v1.5.5
from jpegoptim.
@tjko there are no more SEGV crashes using the same POC with jpegoptim v1.5.5, I suppose the issue was already fixed by 3401f25
It seems to be the same issue with
#107
CVE-2022-32325
from jpegoptim.
@schsiung, yes I think you're correct. I had forgotten about the 'custom' memory manager that jpegoptim uses. It can make it look like there is problem in the libjpeg, when the problem is actually in jpegoptim (jpegsrc.c)...
from jpegoptim.
Related Issues (20)
- SEGV error in optimize, jpegoptim.c:632 HOT 3
- SEGV in optimize, jpegoptim.c:1055 (without invoking libjpeg) HOT 1
- Can I use it on my jailbreaked ios device
- multithread results in garbled output HOT 4
- size option and batching multiple files HOT 2
- Parallel processing support in Windows? HOT 2
- Destination path parameter does not work properly HOT 1
- Feat.req. Win build in Release tab HOT 2
- Heap-buffer-overflow n function optimize at jpegoptim.c:691:12 HOT 1
- Asan errors detected in 32bit asan version. HOT 4
- please update config.guess and config.sub HOT 1
- Progressive JPEG files by default? HOT 12
- Release Page Linux binaries crashing on ubuntu 20.04 HOT 1
- [Minor] archive is missing on the site HOT 1
- "JFIF" part of jpg header HOT 8
- Don't delete live/motion photos data HOT 2
- Rendered man page incorrectly displays command line switches HOT 1
- Google released a new JPEG coding library called JpegLi HOT 2
- Unable to strip photos in HEIC format. HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from jpegoptim.