Fix: HBO in icCurvesFromXml()

[ChrisCoxArt]

Fixes #651

Pull Request Checklist

• Have you followed the guidelines in Contributing document?
• Have you checked to ensure there aren't other open Pull Requests for the same change?
• Have you built your Pull Request locally with the Build Instructions?
• Have you added or updated relevant tests?
• Have you added or updated relevant docs?

[xsscx]

Maintainer Review

2026-03-08 01:21:09 UTC

cd ~
mkdir pr-658
cd pr-658
git clone https://github.com/InternationalColorConsortium/iccDEV.git
cd iccDEV
git fetch origin pull/658/head:pr-658
git checkout pr-658
cd Build
export CXX=clang++ && export CXXFLAGS="-fsanitize=address,undefined -fno-omit-frame-pointer -g -O1 -fprofile-arcs -ftest-coverage" && export LDFLAGS="-fsanitize=address,undefined -fprofile-arcs" && cmake Cmake -DCMAKE_BUILD_TYPE=RelWithDebInfo -DENABLE_ASAN=ON -DENABLE_UBSAN=ON -DENABLE_COVERAGE=ON
make -j32
wget https://github.com/xsscx/fuzz/raw/refs/heads/master/xml/icc/hbo-icCurvesFromXml-IccTagXml_cpp-Line333.xml
ASAN_OPTIONS=print_scariness=1:halt_on_error=0 iccFromXml hbo-icCurvesFromXml-IccTagXml_cpp-Line333.xml foo.bar
...
git log --oneline --graph -1
* fa8ead4 (HEAD -> pr-658, origin/issue-651) check channel counts when reading CLUTs from XML
ASAN_OPTIONS=print_scariness=1:halt_on_error=0 Tools/IccFromXml/iccFromXml hbo-icCurvesFromXml-IccTagXml_cpp-Line333.xml foo.bar
Unable to Parse "lutAtoBType" (AToB0Tag) Tag on line 32

Unable to Parse 'hbo-icCurvesFromXml-IccTagXml_cpp-Line333.xml'

[xsscx]

GHSA-mv6h-vpcg-pwfx