[vtk-developers] [VTK 0014129]: Buffer overflow in vtkJPEGWriter when writing to memory

[Mantis Bug Tracker]

The following issue has been SUBMITTED. 
====================================================================== 
http://vtk.org/Bug/view.php?id=14129 
====================================================================== 
Reported By:                Maxim Churilin
Assigned To:                
====================================================================== 
Project:                    VTK
Issue ID:                   14129
Category:                   (No Category)
Reproducibility:            have not tried
Severity:                   minor
Priority:                   normal
Status:                     backlog
Project:                    TBD 
Type:                       crash 
Resolution:                 open
Fixed in Version:           
====================================================================== 
Date Submitted:             2013-06-16 16:13 MSD
Last Modified:              2013-06-16 16:13 MSD
====================================================================== 
Summary:                    Buffer overflow in vtkJPEGWriter when writing to
memory
Description: 
Inside vtkJPEGWriter::Write method the value of InternalFileName variable is
determined depending on FileName, FilePrefix and FilePattern variables using
sprintf function. 

For instance, vtkJPEGWriter has FileName = NULL, FilePrefix = NULL and
FilePattern = "%s.%d by default. If WriteToMemory flag is set, the
InternalFileName will be computed using the following line:

sprintf(this->InternalFileName, this->FilePattern,this->FileNumber); 

which will cause the buffer oferflow.
====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2013-06-16 16:13 Maxim Churilin New Issue                                    
======================================================================