Closed seviezhou closed 3 years ago
seems like you found an interesting issue...I'll look into it was this a specially crafted .lep file?
Yes, it is a crafted .lep file, maybe not valid.
Ya it's not a valid file, but thanks for reporting. We generally use assert to validate the file format since the idea is to run a separate copy of lepton for each decode to enable jailing
System info
Ubuntu X64, gcc (Ubuntu 5.5.0-12ubuntu1), lepton (latest master 3d1bc1)
Configure
CFLAGS="-g -fsanitize=address" LDFLAGS="-fsanitize=address" ./configure
Command line
./lepton -unjailed @@ /tmp/lep.jpg
Output
POC
assert-fail-nd_array-158.zip