Skip to content

Fix: SEGV in CIccCLUT::Interp3d()#653

Merged
xsscx merged 1 commit intomasterfrom
issue-645
Mar 7, 2026
Merged

Fix: SEGV in CIccCLUT::Interp3d()#653
xsscx merged 1 commit intomasterfrom
issue-645

Conversation

@ChrisCoxArt
Copy link
Contributor

Fixes #645

Pull Request Checklist

  • Have you followed the guidelines in Contributing document?
  • Have you checked to ensure there aren't other open Pull Requests for the same change?
  • Have you built your Pull Request locally with the Build Instructions?
  • Have you added or updated relevant tests?
  • Have you added or updated relevant docs?

@ChrisCoxArt ChrisCoxArt requested a review from xsscx as a code owner March 7, 2026 22:58
@xsscx xsscx self-assigned this Mar 7, 2026
@xsscx xsscx added PR Pull Request Review in Process Issue is being Reviewed by Maintainers Pending Merge Maintainer indicates Merge Pending and requests no further changes and removed Review in Process Issue is being Reviewed by Maintainers pending labels Mar 7, 2026
Copy link
Member

@xsscx xsscx left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maintainer Review

2026-03-07 23:10:03 UTC

mkdir pr-654
cd pr-654
git clone https://github.com/InternationalColorConsortium/iccDEV.git
cd iccDEV
git fetch origin pull/654/head:pr-654
git checkout pr-654
cd Build
export CXX=clang++ && export CXXFLAGS="-fsanitize=address,undefined -fno-omit-frame-pointer -g -O1 -fprofile-arcs -ftest-coverage" && export LDFLAGS="-fsanitize=address,undefined -fprofile-arcs" && cmake Cmake -DCMAKE_BUILD_TYPE=RelWithDebInfo -DENABLE_ASAN=ON -DENABLE_UBSAN=ON -DENABLE_COVERAGE=ON
make -j32
wget https://github.com/xsscx/fuzz/raw/refs/heads/master/graphics/icc/segv-CIccCLUT-Interp3d-IccTagLut_cpp-Line2741.icc
ASAN_OPTIONS=detect_leaks=0:print_scariness=1 iccApplyProfiles foo.tif /tmp/out.tif 0 0 0 0 0 segv-CIccCLUT-Interp3d-IccTagLut_cpp-Line2741.icc 0
wget https://github.com/xsscx/fuzz/raw/refs/heads/master/graphics/icc/ub-nan-outside-range-iccApplyProfiles_cpp-Line560.icc
wget https://github.com/xsscx/fuzz/raw/refs/heads/master/graphics/tif/test_rgb.tif
ASAN_OPTIONS=detect_leaks=0:print_scariness=1 Tools/IccApplyProfiles/iccApplyProfiles test_rgb.tif /tmp/out.tif 0 0 0 0 0 segv-CIccCLUT-Interp3d-IccTagLut_cpp-Line2741.icc 0
...
100%

@xsscx xsscx changed the title clip values before dereferencing pointer Fix: SEGV in CIccCLUT::Interp3d() Mar 7, 2026
@xsscx xsscx merged commit 24786d3 into master Mar 7, 2026
27 checks passed
@xsscx xsscx added Merged Merged CVE Requested Maintainer indicates a CVE has been Requested and removed Pending Merge Maintainer indicates Merge Pending and requests no further changes labels Mar 7, 2026
@xsscx
Copy link
Member

xsscx commented Mar 9, 2026

GHSA-6jrq-wfqg-wv7w

@ChrisCoxArt ChrisCoxArt deleted the issue-645 branch March 15, 2026 00:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CVE Requested Maintainer indicates a CVE has been Requested Merged Merged PR Pull Request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SEGV in CIccCLUT::Interp3d() at IccTagLut.cpp:2741

2 participants