In this line:
l_src_ptr = l_img_comp->data + ((OPJ_UINT32)l_tilec->x0 - l_offset_x) + ((OPJ_UINT32)l_tilec->y0 - l_offset_y) * l_image_width;
l_image_width needs to be cast to OPJ_SIZE_T, and this will be fixed.
It might be useful for someone go through all offset calculations in library,
and hunt for overflows.
Original issue reported on code.google.com by boxe...@gmail.com on 4 Jun 2015 at 8:49
Original issue reported on code.google.com by
boxe...@gmail.com
on 4 Jun 2015 at 8:49