Closed Teemperor closed 1 year ago
Thank you for finding the problem and reporting it in such detail.
Looking at the function, and its use (only in pixThresholdByHisto), there are other problems besides indexing beyond the array. pixThresholdByHisto() is supposed to return 0 for the threshold if it can't find a good one. But numaFindLocForThreshold() is not designed to return 0 on failure to find a minimum value. And there are other places in numaFindLocForThreshold() where array indexing can go bad.
I will fix it within two days.
(well, 2 weeks, anyway :-) Fixed.
Dan, you forgot to close this issue.
you beat me to it by 30 seconds :-)
I'm so sorry. :-)
Explanation of what I think goes wrong (see
//NOTE:
comments)To reproduce:
./binarize_fuzzer poc_input
over the attached fuzzer input from the zip.Sanitizer output below: