-
Bug
-
Resolution: Fixed
-
P3
-
8, 11, 17, 21, 22
-
b22
-
generic
-
generic
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8323363 | 21.0.3-oracle | Jayathirth D V | P3 | Resolved | Fixed | b01 |
JDK-8319769 | 21.0.2 | Jayathirth D V | P3 | Resolved | Fixed | b07 |
JDK-8319460 | 17.0.11-oracle | Jayathirth D V | P3 | Resolved | Fixed | b01 |
JDK-8321245 | 17.0.11 | Goetz Lindenmaier | P3 | Resolved | Fixed | b01 |
JDK-8319459 | 11.0.23-oracle | Jayathirth D V | P3 | Resolved | Fixed | b01 |
JDK-8322202 | 11.0.23 | Amos SHI | P3 | Resolved | Fixed | b01 |
JDK-8338772 | openjdk8u432 | Sergey Bylokhov | P3 | Resolved | Fixed | b03 |
JDK-8319580 | 8u411 | Jayathirth D V | P3 | Closed | Fixed | b01 |
We update num_bytes with sb->remaining_skip in these functions and it can overflow. We need additional check for num_bytes here.
We have similar function in native/libsplashscreen/splashscreen_jpeg.c : stream_skip_input_data(..) but here we use num_bytes only when it is positive value.
- backported by
-
JDK-8319459 Additional negative value check in JPEG decoding
- Resolved
-
JDK-8319460 Additional negative value check in JPEG decoding
- Resolved
-
JDK-8319769 Additional negative value check in JPEG decoding
- Resolved
-
JDK-8321245 Additional negative value check in JPEG decoding
- Resolved
-
JDK-8322202 Additional negative value check in JPEG decoding
- Resolved
-
JDK-8323363 Additional negative value check in JPEG decoding
- Resolved
-
JDK-8338772 Additional negative value check in JPEG decoding
- Resolved
-
JDK-8319580 Additional negative value check in JPEG decoding
- Closed
- links to
-
Commit openjdk/jdk11u-dev/f06fe1c0
-
Commit openjdk/jdk17u-dev/ce670b67
-
Commit openjdk/jdk21u/0e2a520b
-
Commit openjdk/jdk/75ce02fe
-
Commit(master) openjdk/jdk8u-dev/9a426ad4
-
Review openjdk/jdk11u-dev/2372
-
Review openjdk/jdk17u-dev/1999
-
Review openjdk/jdk21u/320
-
Review openjdk/jdk/16390
-
Review(master) openjdk/jdk8u-dev/510