Skip to content

Fix the DWAA size checks regression#2476

Merged
cary-ilm merged 2 commits into
AcademySoftwareFoundation:mainfrom
vlazar-ilm:fix-DWAA-3.4-regression
Jun 17, 2026
Merged

Fix the DWAA size checks regression#2476
cary-ilm merged 2 commits into
AcademySoftwareFoundation:mainfrom
vlazar-ilm:fix-DWAA-3.4-regression

Conversation

@vlazar-ilm

@vlazar-ilm vlazar-ilm commented Jun 15, 2026

Copy link
Copy Markdown
Contributor

This was introduced by #2383
I was able to read a DWAA file using RB-3.4 (67de2bf) but not latest main.

The original file was generated with Nuke15.1v5 . I was unable to generate a problematic file synthetically.

From what I can read inside this file is that totalAcUncompressedCount is not a bytecount but rather a "count of uint16 DCT (AC) coefficients/elements,".
It would normally have to multiplied with sizeof(uint16). A similar condition is already enforced here:

totalAcUncompressedCount * sizeof (uint16_t) >

Testing:

  • I rebuilt 67de2bf with ASAN and noticed that it chokes with the special defective file( clusterfuzz-testcase-openexr_exrcorecheck )
  • after my fix ASAN is happy and original DWAA file can be read

Signed-off-by: Vlad Lazar <vlazar@ilm.com>
@vlazar-ilm vlazar-ilm marked this pull request as ready for review June 15, 2026 17:54
@cary-ilm cary-ilm requested a review from kdt3rd June 16, 2026 03:01

@kthurston kthurston left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM - yes, that count is a count, not a size and I missed that in the previous fix where I think we fixed up the actual issue exposed separately. Thanks!

@cary-ilm

Copy link
Copy Markdown
Member

LGTM - yes, that count is a count

but this is the count
image

@cary-ilm cary-ilm merged commit bc7fc07 into AcademySoftwareFoundation:main Jun 17, 2026
50 of 51 checks passed
cary-ilm pushed a commit that referenced this pull request Jun 17, 2026
peterhillman pushed a commit that referenced this pull request Jun 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants