integer overflow handling extreme values in drawImage(xyxy, xyxy)

XMLWordPrintable

    • Type: Bug
    • Resolution: Unresolved
    • Priority: P4
    • None
    • Affects Version/s: 1.4.0
    • Component/s: client-libs
    • None
    • 2d
    • Fix Understood
    • generic
    • generic

      The internal implementation of the

      drawImage(img, dx1, dy1, dx2, dy2, sx1, sy1, sx2, sy2, obs)

      method call can incur integer overflow if any of the dimensions is large
      enough to overflow a signed integer. The dimensions in this case are
      the differences abs(dx2 - dx1), abs(dy2 - dy1), abs(sx2 - sx1), abs(sy2 - sy1).

      The resulting overflowed result will cause us to ignore the operation even
      though the results are quite reasonable. In some cases the miscalculation
      can cause us to throw an exception for otherwise valid data.

            Assignee:
            Unassigned
            Reporter:
            Jim Graham
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Imported:
              Indexed: