Package: libjasper1
Version: 1.900.1-7+squeeze1

When trying to read fairly large images, the library may crash due to
running out of stack space.
Please see attached image that demonstrates this issue.

"jasper --input jasper_stack_overflow.jp2 --output-format jpc > /dev/null"

I suggest that all traces of variable length arrays be disabled
(HAVE_VLA define) or removed altogether. It is a bad feature prone to
abuse, as in this case.
Memory for the image data should be allocated on the heap.

Attachment: jasper_stack_overflow.jp2.bz2
Description: BZip2 compressed data

Reply via email to