google / earthenterprise

Google Earth Enterprise - Open Source
Apache License 2.0
2.67k stars 887 forks source link

Possible overflow in vector handling #1934

Closed tst-lsavoie closed 3 years ago

tst-lsavoie commented 3 years ago

Describe the bug

There are potential overflows in our vector handling where code accesses the 4th element of a 3-element vector. The lines in question are in src/fusion/rasterfuse/vipm/vector.h, lines 195, 200, and 201.

It's possible that this code is unused.

To Reproduce

There is no known way to trigger this bug.

Expected behavior

Open GEE does not read outside the bounds of vectors.