On Sun, Jan 14, 2018 at 01:37:11PM +0100, zyx wrote: > On Thu, 2018-01-11 at 17:00 -0500, Probe Fuzzer wrote: > > To reproduce the issue, compile podofo with UBSAN "- > > fsanitize=undefined", > > then execute: podofoimgextract $POC OUTPUT_DIR > > Hi, > similarly as with your message about integer overflow, I cannot > reproduce this with revision 1866, the podofoimgextract reports > an error:
It's UB and at least GCC likes to aggressively fuck things up ^W^W^Woptimize based on it. It is harmless for pretty much any implementation of mem*, since they can't actually dererence the pointer without checking the length first. Joerg ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Podofo-users mailing list Podofo-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/podofo-users