On Thu, 15 Jan 2026 19:50:47 GMT, Phil Race <[email protected]> wrote:

> Some of the medialib native functions implementing Convolve read data from 
> arrays when it is not needed or used instead of reading just what is needed 
> and used.
> This is detected as a read out of bounds. It is limited and hasn't been seen 
> to result in any crashes without ASAN, and the OOB values that are read are 
> never used so there's a very limited problem.
> The changes here make the mlib_ImageConv_*nw.c files match what happens in 
> the mlib_ImageConv_*ext.c files which read just the data they need.
> The changes are fairly mechanical but there could be copy/paste errors for a 
> reviewer to find.
> 
> Not easy to provide a test case, building with --enable-asan is needed and 
> for me it works only on macOS.
> I did that and ran all our existing automated tests on our CI systems.

This pull request has now been integrated.

Changeset: 779970fb
Author:    Phil Race <[email protected]>
URL:       
https://git.openjdk.org/jdk/commit/779970fb6fdae8b12ca29b4887d2812c50835653
Stats:     461 lines in 7 files changed: 376 ins; 46 del; 39 mod

8373626: [asan] read past end of buffer in sun.awt.image.ImagingLib.convolveBI

Reviewed-by: jdv

-------------

PR: https://git.openjdk.org/jdk/pull/29257

Reply via email to