MantisBT - VTK
View Issue Details
0014129VTK(No Category)public2013-06-16 08:132013-12-18 10:50
Maxim Churilin 
Sankhesh Jhaveri 
normalminorhave not tried
closedfixed 
5.10.0 
6.1.0 
TBD
crash
0014129: Buffer overflow in vtkJPEGWriter when writing to memory
Inside vtkJPEGWriter::Write method the value of InternalFileName variable is determined depending on FileName, FilePrefix and FilePattern variables using sprintf function.

For instance, vtkJPEGWriter has FileName = NULL, FilePrefix = NULL and FilePattern = "%s.%d by default. If WriteToMemory flag is set, the InternalFileName will be computed using the following line:

sprintf(this->InternalFileName, this->FilePattern,this->FileNumber);

which will cause the buffer oferflow.
No tags attached.
Issue History
2013-06-16 08:13Maxim ChurilinNew Issue
2013-12-17 18:05guestNote Added: 0031992
2013-12-17 18:05guestStatusbacklog => gerrit review
2013-12-17 18:07Sankhesh JhaveriNote Edited: 0031992bug_revision_view_page.php?rev_id=694
2013-12-17 18:07Sankhesh JhaveriNote Added: 0031994
2013-12-17 18:08Sankhesh JhaveriNote Deleted: 0031992
2013-12-18 10:50Sankhesh JhaveriStatusgerrit review => closed
2013-12-18 10:50Sankhesh JhaveriAssigned To => Sankhesh Jhaveri
2013-12-18 10:50Sankhesh JhaveriResolutionopen => fixed
2013-12-18 10:50Sankhesh JhaveriFixed in Version => 6.1.0

Notes
(0031994)
Sankhesh Jhaveri   
2013-12-17 18:07   
Pushed change to http://review.source.kitware.com/#/c/13847/ [^] [^]