Skip to content

Unused code in FliDecode.c and _imaging.c has SAST security issue #8405

@karasovsky

Description

@karasovsky

Hello!

According to the comments in _imaging.c thers is number of codecs, that must be replaced in PIL 1.2. But PIL development was discontinued 15 years ago.

image

One of this codecs has SAST security issue.

image

state->xsize potentially be equal to zero, which will lead to division by zero exception in ImagingFliDecode. If this code is not used, I suggest remove it.

Found by Linux Verification Center (linuxtesting.org) with SVACE.
Reporter: Dmitriy Karasovsky (d.karasovsky@fobos-nt.ru).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions