Skip to content

Application crashed when imdecode() is called for .jp2 image #5849

@skomazec1

Description

@skomazec1

[alalek]: Solution is to replace jasper (stalled development) to modern OpenJPEG library.


Hi,

i am working on application that uses opencv for images.
We have a crash when calling imdecode() function in our code for jpeg2000 images.
(attached example of the image that causes crash)
example1.zip

i have a dump file for this crash, related stack trace is following:

FAULTING_IP:
ContactService!jas_image_chclrspc+2ee
0978353e 8b4018 mov eax,dword ptr [eax+18h]

EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 0978353e (ContactService!jas_image_chclrspc+0x000002ee)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 00000000
Parameter[1]: 88000027
Attempt to read from address 88000027

PROCESS_NAME: CiscoJabber.exe
ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
EXCEPTION_PARAMETER1: 00000000
EXCEPTION_PARAMETER2: 88000027
READ_ADDRESS: 88000027
FOLLOWUP_IP:
ContactService!jas_image_chclrspc+2ee
0978353e 8b4018 mov eax,dword ptr [eax+18h]
MOD_LIST:
NTGLOBALFLAG: 0
APPLICATION_VERIFIER_FLAGS: 0
FAULTING_THREAD: 000027fc
BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_READ_FILL_PATTERN_ffffffff
PRIMARY_PROBLEM_CLASS: INVALID_POINTER_READ_FILL_PATTERN_ffffffff
DEFAULT_BUCKET_ID: INVALID_POINTER_READ_FILL_PATTERN_ffffffff
LAST_CONTROL_TRANSFER: from 096cfb68 to 0978353e

STACK_TEXT:
1409f14c 096cfb68 19f381d0 104dd9d0 00000001 ContactService!jas_image_chclrspc+0x2ee
1409f1a8 096c5329 1409f4d4 dd9bc1dc 00000000 ContactService!cv::Jpeg2KDecoder::readData+0xa8
1409f330 096c4d4e 1409f358 00000001 00000002 ContactService!cv::imdecode+0x5a9
1409f3a0 09522026 1409f4d4 1409f45c 00000001 ContactService!cv::imdecode+0x6e
// Application related details
...

SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: contactservice!jas_image_chclrspc+2ee
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: ContactService
IMAGE_NAME: ContactService.dll
DEBUG_FLR_IMAGE_TIMESTAMP: 55c239be
STACK_COMMAND: ~62s; .ecxr ; kb
FAILURE_BUCKET_ID: INVALID_POINTER_READ_FILL_PATTERN_ffffffff_c0000005_ContactService.dll!jas_image_chclrspc
BUCKET_ID: APPLICATION_FAULT_INVALID_POINTER_READ_FILL_PATTERN_ffffffff_contactservice!jas_image_chclrspc+2ee
WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/CiscoJabber_exe/11_0_1_19000/55c23a85/ContactService_dll/9_0_0_3829/55c239be/c0000005/0032353e.htm?Retriage=1

Please contact me for more information if needed.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions