[kdegraphics-mobipocket] [Bug 486853] Baloo file extractor crashes a dozen times for Mobipocket files

Carl Schwan bugzilla_noreply at kde.org
Sun Mar 23 21:29:24 GMT 2025


https://bugs.kde.org/show_bug.cgi?id=486853

--- Comment #10 from Carl Schwan <carl at carlschwan.eu> ---
Git commit 1eebd7a60571791f5d3447f18749660656c93798 by Carl Schwan, on behalf
of Stefan BrĂ¼ns.
Committed on 23/03/2025 at 21:29.
Pushed by carlschwan into branch 'release/25.04'.

Fix possible out-of-bounds access in BitReader

The read function access data up to data[(len + 31)/8], thus len should
reflect the size (count of bits) of the original data, without the
extra padding null characters.

SENTRY: OKULAR-AD
SENTRY: BALOO-33
SENTRY: BALOO-43Y
(cherry picked from commit 866a069538a268d264cf002aa9570f97a84045da)

M  +1    -3    lib/decompressor.cpp

https://invent.kde.org/graphics/kdegraphics-mobipocket/-/commit/1eebd7a60571791f5d3447f18749660656c93798

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the Unassigned-bugs mailing list