mirrors/zint
2
0
Fork 0
mirror of https://github.com/zint/zint synced 2024-11-16 20:57:25 +13:00
Code Issues Actions Packages Projects Releases Wiki Activity

CODEONE: is_last_single_ascii() out-of-bounds sp + 1, #232 CI-Fuzz, props Jan Schrewe

Browse Source
This commit is contained in:
gitlost 2021-07-05 11:52:43 +01:00
parent bcf6eff93c
commit 9b02cd5221
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
backend/code1.c
View File

@ -316,7 +316,7 @@ static int c1_look_ahead_test(const unsigned char source[], const int sourcelen,
/* Whether can fit last character or characters in a single ASCII codeword */ /* Whether can fit last character or characters in a single ASCII codeword */
static int is_last_single_ascii(const unsigned char string[], const int length, const int sp) { static int is_last_single_ascii(const unsigned char string[], const int length, const int sp) {
if (length - sp == 1 && string[sp + 1] <= 127) { if (length - sp == 1 && string[sp] <= 127) {
return 1; return 1;
} }
if (length - sp == 2 && istwodigits(string, length, sp)) { if (length - sp == 2 && istwodigits(string, length, sp)) {

4
backend/tests/test_code1.c
View File

@ -2568,7 +2568,6 @@ static void test_encode(int index, int generate, int debug) {
testFinish(); testFinish();
} }
// #181 Nico Gunkel OSS-Fuzz
static void test_fuzz(int index, int debug) { static void test_fuzz(int index, int debug) {
struct item { struct item {
@ -2578,7 +2577,8 @@ static void test_fuzz(int index, int debug) {
}; };
// s/\/\*[ 0-9]*\*\//\=printf("\/*%2d*\/", line(".") - line("'<")) // s/\/\*[ 0-9]*\*\//\=printf("\/*%2d*\/", line(".") - line("'<"))
struct item data[] = { struct item data[] = {
/* 0*/ { "3333P33B\035333V3333333333333\0363", -1, 0 }, /* 0*/ { "3333P33B\035333V3333333333333\0363", -1, 0 }, // #181 Nico Gunkel, OSS-Fuzz
/* 1*/ { "{{-06\024755712162106130000000829203983\377", -1, 0 }, // #232 Jan Schrewe, CI-Fuzz, out-of-bounds in is_last_single_ascii() sp + 1
}; };
int data_size = ARRAY_SIZE(data); int data_size = ARRAY_SIZE(data);
int i, length, ret; int i, length, ret;