Fix: SBO in CIccXform3DLut::Apply()

[ChrisCoxArt]

Pull Request Checklist

• Have you followed the guidelines in Contributing document?
• Have you checked to ensure there aren't other open Pull Requests for the same change?
• Have you built your Pull Request locally with the Build Instructions?
• Have you added or updated relevant tests?
• Have you added or updated relevant docs?

[xsscx]

2026-03-07 23:49:11 UTC

[xsscx]

Maintainer Review

2026-03-07 23:50:49 UTC

mkdir pr-655
cd pr-655
git clone https://github.com/InternationalColorConsortium/iccDEV.git
cd iccDEV
git fetch origin pull/655/head:pr-655
git checkout pr-655
cd Build
export CXX=clang++ && export CXXFLAGS="-fsanitize=address,undefined -fno-omit-frame-pointer -g -O1 -fprofile-arcs -ftest-coverage" && export LDFLAGS="-fsanitize=address,undefined -fprofile-arcs" && cmake Cmake -DCMAKE_BUILD_TYPE=RelWithDebInfo -DENABLE_ASAN=ON -DENABLE_UBSAN=ON -DENABLE_COVERAGE=ON
make -j32
wget wget https://github.com/xsscx/fuzz/raw/refs/heads/master/graphics/icc/sbo-CIccXform3DLut-Apply-IccCmm_cpp-Line5873.icc
wget https://github.com/xsscx/fuzz/raw/refs/heads/master/graphics/tif/test_rgb.tif
ASAN_OPTIONS=print_scariness=1:detect_leaks=0 iccApplyProfiles test_rgb.tif foo.tif 0 0 0 0 1 sbo-CIccXform3DLut-Apply-IccCmm_cpp-Line5873.icc 40
...
Error 8 - Unable to begin profile application - Possibly invalid or incompatible profiles

[xsscx]

GHSA-wh5x-j6pq-pr3c