UB at TiffImg.h:98

[xsscx]

Maintainer Repro

Wed Mar 25 22:23:04 UTC 2026

Thank you Imaging-Art-Beyond-RGB-Project and SS, PN, RM, JG-S & NM from RIT for the Reports!

Git

9e0b03c (HEAD -> master, origin/master, origin/HEAD) Fix: ci-build-matrix (#714)

Step 1. curl -O https://xss.cx/2026/03/25/img/BeyondRGB_CM_1774467526.tiff

Step 2. iccTiffDump BeyondRGB_CM_1774467526.tiff foo.bar

PoC Output

Filename: BeyondRGB_CM_1774467526.tiff
TiffImg.h:98:49: runtime error: division by zero
SUMMARY: TiffImg.h:98:49 
TiffImg.h:99:51: runtime error: division by zero
SUMMARY: TiffImg.h:99:51 

[ChrisCoxArt]

xRes was zero, yRes was negative and near zero.