Actions
Bug #896
closedxml2dcm crashes caused by defective XML files
Start date:
2019-09-04
Due date:
% Done:
100%
Estimated time:
Module:
dcmdata
Operating System:
Compiler:
Description
Memory corruption related crashes have been discovered during fuzz-testing of xml2dcm. Each of the XML files in the attached ZIP file will cause a segmentation fault on systems affected.
The bug can be reproduced on DCMTK 3.6.2 and 3.6.4, Linux (x64) and MacOS (x64), both using libxml2 2.9.4. (with and without ICONV support). The bug seems to not affect DCMTK 3.6.4 on Windows (x64) with libxml2 2.9.7.
Bug report and sample files submitted 2019-09-03 by Sergei Gordey.
Files
Actions