More info: (gdb) print buffer $30 = (const unsigned char *) 0x7ffff7e30000 "II*" (gdb) print buffer_size $31 = 65536 (gdb) print tag_make $33 = 0x8000021c6390 <Address 0x8000021c6390 out of bounds> (gdb) print find_tag_from_tiff_header((const TIFFHeader *)buffer, buffer_size, 271) $34 = 0x8000021c6390 <Address 0x8000021c6390 out of bounds> (gdb) print find_tag_from_tiff_header_le((const TIFFHeader *)buffer, buffer_size, 271) $36 = 0x8000021c6390 <Address 0x8000021c6390 out of bounds>
It seems to me that somehow find_tag_from_tiff_header_le should return NULL instead of an invalid pointer, or something like that. Greetings, Miry -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

