mirrors/JetBrainsRuntime
1
0
Fork 0
mirror of https://github.com/JetBrains/JetBrainsRuntime.git synced 2025-12-06 09:29:38 +01:00
Code Issues Packages Projects Releases Wiki Activity

8302151: BMPImageReader throws an exception reading BMP images

Browse Source 
Reviewed-by: serb, tr
(cherry picked from commit aa10f0d3ee)
This commit is contained in:
Jayathirth D V
2023-02-21 07:30:17 +00:00
committed by Vitaly Provodin
parent 5914be1caf
commit 128ea64fd5
2 changed files with 68 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/java.desktop/share/classes/com/sun/imageio/plugins/bmp/BMPImageReader.java
View File

@@ -592,8 +592,10 @@ public class BMPImageReader extends ImageReader implements BMPConstants {
height = Math.abs(height);
}
if (metadata.compression == BI_RGB) {
long imageDataSize = ((long)width * height * (bitsPerPixel / 8));
if (metadata.compression == BI_RGB &&
metadata.paletteSize == 0 &&
metadata.bitsPerPixel >= 16) {
long imageDataSize = (((long)width * height * bitsPerPixel) / 8);
if (imageDataSize > (bitmapFileSize - bitmapOffset)) {
throw new IIOException(I18N.getString("BMPImageReader9"));
}

64
test/jdk/javax/imageio/plugins/bmp/BMP1bppImageWithPaletteTest.java Normal file
View File

@@ -0,0 +1,64 @@
/*
* Copyright (c) 2023, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License version 2 only, as
* published by the Free Software Foundation.
*
* This code is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* version 2 for more details (a copy is included in the LICENSE file that
* accompanied this code).
*
* You should have received a copy of the GNU General Public License version
* 2 along with this work; if not, write to the Free Software Foundation,
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
*
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
* or visit www.oracle.com if you need additional information or have any
* questions.
*/
/*
* @test
* @bug 8302151
* @summary Tests that we should not try to calculate bitmap image
size using bitmap file size when we have a color palette
*/
import java.io.ByteArrayInputStream;
import java.io.EOFException;
import java.io.IOException;
import javax.imageio.ImageIO;
public class BMP1bppImageWithPaletteTest {
public static void main(String[] args) throws IOException {
// incomplete 1bpp BMP byte stream with color palette and
// invalid file size data
byte[] corruptedBmp = { (byte) 0x42, (byte) 0x4d, (byte) 0x0e,
(byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00,
(byte) 0x00, (byte) 0x00, (byte) 0x3e, (byte) 0x00, (byte) 0x00,
(byte) 0x00, (byte) 0x28, (byte) 0x00, (byte) 0x00, (byte) 0x00,
(byte) 0xa2, (byte) 0x06, (byte) 0x00, (byte) 0x00, (byte) 0xb4,
(byte) 0x08, (byte) 0x00, (byte) 0x00, (byte) 0x01, (byte) 0x00,
(byte) 0x01, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00,
(byte) 0x00, (byte) 0xe0, (byte) 0x57, (byte) 0x07, (byte) 0x00,
(byte) 0xc2, (byte) 0x1e, (byte) 0x00, (byte) 0x00, (byte) 0xc2,
(byte) 0x1e, (byte) 0x00, (byte) 0x00, (byte) 0x02, (byte) 0x00,
(byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00,
(byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00,
(byte) 0xff, (byte) 0xff, (byte) 0xff, (byte) 0xff
};
// We expect EOFException to be thrown
try {
ImageIO.read(new ByteArrayInputStream(corruptedBmp));
} catch(Exception ex) {
if (!(ex instanceof EOFException))
throw ex;
}
}
}