Ubuntu
tiff package

  1. Maverick (10.10)
  2. Bug #591605
  3. Comment #2

Comment 2 for bug 591605

Revision history for this message
Tomas Hoger (thoger) wrote :

This seems to be crashing on buffer over-read in putcontig8bitYCbCr11tile(). gtTileContig() allocates buffer buf with size returned by TIFFTileSize() (80640 in this case). putcontig8bitYCbCr11tile() tries to read w*h*3 bytes out of it (234*213*3 = 149526 in this case).