Page MenuHome

Heap Buffer Overflow when viewing dds thumbnails in the file browser.
Confirmed, NormalPublic

Description

System Information
Operating system: Windows 10 v2004 (w/e)
Graphics card: Geforce 940m (w/e)

Blender Version
Broken: 2.83 stable, 2.93 master 9b87d3f02962
Worked: actually never, really, iirc.

Short description of error

Blender crashes when trying to preview thumbnails in a folder containing dds/BC/s3tc compressed files. Without preview, it manages to load them and render correctly, but crashes at some point sooner or later.

It manages to corrupt blend files to not load at all/instacrash blender if those texture files are present/linked in the file.

Steps to Reproduce
Unzip the following file.
Load the .blend file.
Open the file browser, go to the tex->dds folder, and set the Display Mode set to Thumbnails.
Crash.

Event Timeline

mario (dlight) updated the task description. (Show Details)
Robert Guetzkow (rjg) changed the task status from Needs Triage to Needs Information from User.Fri, Mar 26, 9:27 AM

Could you please provide a small example texture that causes these issues and explain how you created that particular file?

sure. https://www.mediafire.com/file/dztaon20da8d1xn/dds_error_files.rar

i did not create the files. it's not relevant tho. the files are default and correctly formatted. verified via hex view.

Robert Guetzkow (rjg) changed the task status from Needs Information from User to Needs Triage.Fri, Mar 26, 2:10 PM
Evan Wilson (EAW) changed the task status from Needs Triage to Confirmed.Sat, Mar 27, 6:49 AM

This is the (possibly) relevant output in the system console in a release build.

GPUTexture: Blender Texture Not Loaded!
GPUTexture: Blender Texture Not Loaded!
Unable to find a suitable DXT compression, falling back to uncompressed.
GPUTexture: Blender Texture Not Loaded!
GPUTexture: Blender Texture Not Loaded!
GPUTexture: Blender Texture Not Loaded!
GPUTexture: Blender Texture Not Loaded!
GPUTexture: Blender Texture Not Loaded!

I had to use D7794 to get a usable stack trace on Windows.

Below is the MSVC stack trace pointing to p_clonejetpack_c.dds (via its 256x256 dimensions and 11 mipmap levels) as the file that Blender was trying to flip. Not sure if it is only caused by this file, or if Blender just happened to be processing it at the time and the others dds files selected randomly would cause the same issue.

[External Code]
blender.exe!FlipDXT1BlockFull(unsigned char * block=0x000012867fb56e00) Line 59
	at C:\blender-git\blender\source\blender\imbuf\intern\dds\FlipDXT.cpp(59)
blender.exe!FlipDXTCImage(unsigned int width=256, unsigned int height=256, unsigned int levels=11, int fourcc=827611204, unsigned char * data=0x000012867fb56e00) Line 230
	at C:\blender-git\blender\source\blender\imbuf\intern\dds\FlipDXT.cpp(230)
blender.exe!imb_load_dds(const unsigned char * mem=0x000012aaa4c50000, unsigned __int64 size=43648, int flags=385, char * colorspace=0x000000af6fbfc0c0) Line 192
	at C:\blender-git\blender\source\blender\imbuf\intern\dds\dds_api.cpp(192)
blender.exe!IMB_ibImageFromMemory(const unsigned char * mem=0x000012aaa4c50000, unsigned __int64 size=43648, int flags=385, unsigned char * colorspace=0x000012607fad9310, const unsigned char * descr=0x000000af6fbfc260) Line 120
	at C:\blender-git\blender\source\blender\imbuf\intern\readimage.c(120)
blender.exe!IMB_loadifffile(int file=6, const unsigned char * filepath=0x000000af6fbfc7b0, int flags=385, unsigned char * colorspace=0x000012607fad9310, const unsigned char * descr=0x000000af6fbfc260) Line 198
	at C:\blender-git\blender\source\blender\imbuf\intern\readimage.c(198)
blender.exe!IMB_loadiffname(const unsigned char * filepath=0x000000af6fbfc7b0, int flags=385, unsigned char * colorspace=0x000012607fad9310) Line 239
	at C:\blender-git\blender\source\blender\imbuf\intern\readimage.c(239)
blender.exe!load_image_single(Image * ima=0x000012607fad8d88, ImageUser * iuser=0x0000125c7fc5eb48, int cfra=0, const int view_id=0, const bool has_packed=false, bool * r_assign=0x000000af6fbfcdf0) Line 4436
	at C:\blender-git\blender\source\blender\blenkernel\intern\image.c(4436)
blender.exe!image_load_image_file(Image * ima=0x000012607fad8d88, ImageUser * iuser=0x0000125c7fc5eb48, int cfra=0) Line 4499
	at C:\blender-git\blender\source\blender\blenkernel\intern\image.c(4499)
blender.exe!image_acquire_ibuf(Image * ima=0x000012607fad8d88, ImageUser * iuser=0x0000125c7fc5eb48, void * * r_lock=0x000000af6fbfd310) Line 4992
	at C:\blender-git\blender\source\blender\blenkernel\intern\image.c(4992)
blender.exe!BKE_image_acquire_ibuf(Image * ima=0x000012607fad8d88, ImageUser * iuser=0x0000125c7fc5eb48, void * * r_lock=0x000000af6fbfd310) Line 5075
	at C:\blender-git\blender\source\blender\blenkernel\intern\image.c(5075)
blender.exe!uiTemplateImageInfo(uiLayout * layout=0x0000124c7fdb33c8, bContext * C=0x000012447fa81638, Image * ima=0x000012607fad8d88, ImageUser * iuser=0x0000125c7fc5eb48) Line 1208
	at C:\blender-git\blender\source\blender\editors\space_image\image_buttons.c(1208)
blender.exe!uiTemplateImage(uiLayout * layout=0x0000124c7fdb33c8, bContext * C=0x000012447fa81638, PointerRNA * ptr=0x000000af6fbfd940, const unsigned char * propname=0x00007ff7d44f7ec0, PointerRNA * userptr=0x000000af6fbfd850, bool compact=false, bool multiview=false) Line 912
	at C:\blender-git\blender\source\blender\editors\space_image\image_buttons.c(912)
blender.exe!node_shader_buts_tex_image_ex(uiLayout * layout=0x0000124c7fdb3788, bContext * C=0x000012447fa81638, PointerRNA * ptr=0x000000af6fbfd940) Line 769
	at C:\blender-git\blender\source\blender\editors\space_node\drawnode.c(769)
blender.exe!rna_NodeInternal_draw_buttons_ext(ID * id=0x000012547fa8c108, bNode * node=0x000012547fa8b708, bContext * C=0x000012447fa81638, uiLayout * layout=0x0000124c7fdb3788) Line 3254
	at C:\blender-git\blender\source\blender\makesrna\intern\rna_nodetree.c(3254)
blender.exe!NodeInternal_draw_buttons_ext_call(bContext * C=0x000012447fa81638, ReportList * reports=0x000000af6fbfde30, PointerRNA * _ptr=0x000012aa95380968, ParameterList * _parms=0x000000af6fbfdeb0) Line 43914
	at C:\blender-git\build_windows_x64_vc16_Debug\source\blender\makesrna\intern\rna_nodetree_gen.c(43914)
blender.exe!RNA_function_call(bContext * C=0x000012447fa81638, ReportList * reports=0x000000af6fbfde30, PointerRNA * ptr=0x000012aa95380968, FunctionRNA * func=0x00007ff7d2ea5280, ParameterList * parms=0x000000af6fbfdeb0) Line 7552
	at C:\blender-git\blender\source\blender\makesrna\intern\rna_access.c(7552)
blender.exe!pyrna_func_call(BPy_FunctionRNA * self=0x000012aa95380950, _object * args=0x000012aa93c9b0f0, _object * kw=0x0000000000000000) Line 6362
	at C:\blender-git\blender\source\blender\python\intern\bpy_rna.c(6362)
[External Code]
blender.exe!bpy_class_call(bContext * C=0x000012447fa81638, PointerRNA * ptr=0x000000af6fbfeb00, FunctionRNA * func=0x00007ff7d3907b40, ParameterList * parms=0x000000af6fbfeb38) Line 8567
	at C:\blender-git\blender\source\blender\python\intern\bpy_rna.c(8567)
blender.exe!panel_draw(const bContext * C=0x000012447fa81638, Panel * panel=0x0000124c7fca6e08) Line 145
	at C:\blender-git\blender\source\blender\makesrna\intern\rna_ui.c(145)
blender.exe!ed_panel_draw(const bContext * C=0x000012447fa81638, ARegion * region=0x000012527fa90c48, ListBase * lb=0x000012527fa90d40, PanelType * pt=0x000012587fba7c88, Panel * panel=0x0000124c7fca6e08, int w=160, int em=10, unsigned char * unique_panel_str=0x0000000000000000, const unsigned char * search_filter=0x0000000000000000) Line 2742
	at C:\blender-git\blender\source\blender\editors\screen\area.c(2742)
blender.exe!ED_region_panels_layout_ex(const bContext * C=0x000012447fa81638, ARegion * region=0x000012527fa90c48, ListBase * paneltypes=0x0000124c7fae2ba8, const unsigned char * * contexts=0x0000000000000000, const unsigned char * category_override=0x0000000000000000) Line 2943
	at C:\blender-git\blender\source\blender\editors\screen\area.c(2943)
blender.exe!ED_region_panels_layout(const bContext * C=0x000012447fa81638, ARegion * region=0x000012527fa90c48) Line 3033
	at C:\blender-git\blender\source\blender\editors\screen\area.c(3033)
blender.exe!ED_region_panels(const bContext * C=0x000012447fa81638, ARegion * region=0x000012527fa90c48) Line 3087
	at C:\blender-git\blender\source\blender\editors\screen\area.c(3087)
blender.exe!node_buttons_region_draw(const bContext * C=0x000012447fa81638, ARegion * region=0x000012527fa90c48) Line 587
	at C:\blender-git\blender\source\blender\editors\space_node\space_node.c(587)
blender.exe!ED_region_do_draw(bContext * C=0x000012447fa81638, ARegion * region=0x000012527fa90c48) Line 563
	at C:\blender-git\blender\source\blender\editors\screen\area.c(563)
blender.exe!wm_draw_window_offscreen(bContext * C=0x000012447fa81638, wmWindow * win=0x000012507fa87588, bool stereo=false) Line 732
	at C:\blender-git\blender\source\blender\windowmanager\intern\wm_draw.c(732)
blender.exe!wm_draw_window(bContext * C=0x000012447fa81638, wmWindow * win=0x000012507fa87588) Line 875
	at C:\blender-git\blender\source\blender\windowmanager\intern\wm_draw.c(875)
blender.exe!wm_draw_update(bContext * C=0x000012447fa81638) Line 1074
	at C:\blender-git\blender\source\blender\windowmanager\intern\wm_draw.c(1074)
blender.exe!WM_main(bContext * C=0x000012447fa81638) Line 653
	at C:\blender-git\blender\source\blender\windowmanager\intern\wm.c(653)
blender.exe!main(int argc=1, const unsigned char * * UNUSED_argv_c=0x0000123a7fa80f20) Line 231
	at C:\blender-git\blender\source\creator\creator.c(231)
[External Code]

Below is the system console debug ASAN build output.

==568==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x12867fb56e04 at pc 0x7ff7c2dfa00b bp 0x00af6fbfbb50 sp 0x00af6fbfbb58
READ of size 1 at 0x12867fb56e04 thread T0
    #0 0x7ff7c2dfa00a in FlipDXT1BlockFull C:\blender-git\blender\source\blender\imbuf\intern\dds\FlipDXT.cpp:59
    #1 0x7ff7c2df9e04 in FlipDXTCImage(unsigned int, unsigned int, unsigned int, int, unsigned char *) C:\blender-git\blender\source\blender\imbuf\intern\dds\FlipDXT.cpp:229
    #2 0x7ff7c2deed24 in imb_load_dds C:\blender-git\blender\source\blender\imbuf\intern\dds\dds_api.cpp:189
    #3 0x7ff7bf54229b in IMB_ibImageFromMemory C:\blender-git\blender\source\blender\imbuf\intern\readimage.c:120
    #4 0x7ff7bf542bab in IMB_loadifffile C:\blender-git\blender\source\blender\imbuf\intern\readimage.c:198
    #5 0x7ff7bf54291a in IMB_loadiffname C:\blender-git\blender\source\blender\imbuf\intern\readimage.c:239
    #6 0x7ff7bdd3a46c in load_image_single C:\blender-git\blender\source\blender\blenkernel\intern\image.c:4436
    #7 0x7ff7bdd3acad in image_load_image_file C:\blender-git\blender\source\blender\blenkernel\intern\image.c:4499
    #8 0x7ff7bdd2ec29 in image_acquire_ibuf C:\blender-git\blender\source\blender\blenkernel\intern\image.c:4992
    #9 0x7ff7bdd1dfce in BKE_image_acquire_ibuf C:\blender-git\blender\source\blender\blenkernel\intern\image.c:5075
    #10 0x7ff7c1b4908a in uiTemplateImageInfo C:\blender-git\blender\source\blender\editors\space_image\image_buttons.c:1208
    #11 0x7ff7c1b46ee5 in uiTemplateImage C:\blender-git\blender\source\blender\editors\space_image\image_buttons.c:910
    #12 0x7ff7c1ba60bf in node_shader_buts_tex_image_ex C:\blender-git\blender\source\blender\editors\space_node\drawnode.c:768
    #13 0x7ff7c011b6b9 in rna_NodeInternal_draw_buttons_ext C:\blender-git\blender\source\blender\makesrna\intern\rna_nodetree.c:3253
    #14 0x7ff7c01a915b in NodeInternal_draw_buttons_ext_call C:\blender-git\build_windows_x64_vc16_Debug\source\blender\makesrna\intern\rna_nodetree_gen.c:43913
    #15 0x7ff7c003b858 in RNA_function_call C:\blender-git\blender\source\blender\makesrna\intern\rna_access.c:7550
    #16 0x7ff7c091dc02 in pyrna_func_call C:\blender-git\blender\source\blender\python\intern\bpy_rna.c:6360
    #17 0x7fffd1d764d6  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x1802864d6)
    #18 0x7fffd202cbb9  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x18053cbb9)
    #19 0x7fffd202d1d1  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x18053d1d1)
    #20 0x7fffd2028465  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x180538465)
    #21 0x7fffd2021b79  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x180531b79)
    #22 0x7fffd1d74945  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x180284945)
    #23 0x7fffd1d73e79  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x180283e79)
    #24 0x7fffd1d74c82  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x180284c82)
    #25 0x7fffd1d73347  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x180283347)
    #26 0x7ff7c0922f76 in bpy_class_call C:\blender-git\blender\source\blender\python\intern\bpy_rna.c:8567
    #27 0x7ff7c04ff469 in panel_draw C:\blender-git\blender\source\blender\makesrna\intern\rna_ui.c:143
    #28 0x7ff7c09d08e5 in ed_panel_draw C:\blender-git\blender\source\blender\editors\screen\area.c:2740
    #29 0x7ff7c09b7ae1 in ED_region_panels_layout_ex C:\blender-git\blender\source\blender\editors\screen\area.c:2934
    #30 0x7ff7c09b904d in ED_region_panels_layout C:\blender-git\blender\source\blender\editors\screen\area.c:3032
    #31 0x7ff7c09b719c in ED_region_panels C:\blender-git\blender\source\blender\editors\screen\area.c:3086
    #32 0x7ff7c1beb5a8 in node_buttons_region_draw C:\blender-git\blender\source\blender\editors\space_node\space_node.c:586
    #33 0x7ff7c09b51a4 in ED_region_do_draw C:\blender-git\blender\source\blender\editors\screen\area.c:558
    #34 0x7ff7bef28604 in wm_draw_window_offscreen C:\blender-git\blender\source\blender\windowmanager\intern\wm_draw.c:731
    #35 0x7ff7bef28f94 in wm_draw_window C:\blender-git\blender\source\blender\windowmanager\intern\wm_draw.c:872
    #36 0x7ff7bef237ec in wm_draw_update C:\blender-git\blender\source\blender\windowmanager\intern\wm_draw.c:1073
    #37 0x7ff7beea0f61 in WM_main C:\blender-git\blender\source\blender\windowmanager\intern\wm.c:652
    #38 0x7ff7bdcc4983 in main C:\blender-git\blender\source\creator\creator.c:520
    #39 0x7ff7c9e4f0e8 in invoke_main d:\A01\_work\12\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:78
    #40 0x7ff7c9e4f03d in __scrt_common_main_seh d:\A01\_work\12\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:288
    #41 0x7ff7c9e4eefd in __scrt_common_main d:\A01\_work\12\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:330
    #42 0x7ff7c9e4f15d in mainCRTStartup d:\A01\_work\12\s\src\vctools\crt\vcstartup\src\startup\exe_main.cpp:16
    #43 0x7ff82b797033  (C:\WINDOWS\System32\KERNEL32.DLL+0x180017033)
    #44 0x7ff82b902650  (C:\WINDOWS\SYSTEM32\ntdll.dll+0x180052650)

0x12867fb56e04 is located 4 bytes to the right of 43520-byte region [0x12867fb4c400,0x12867fb56e00)
allocated by thread T0 here:
    #0 0x7fffd2d1c462  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\clang_rt.asan_dbg_dynamic-x86_64.dll+0x18004c462)
    #1 0x7ff7c2df4e5f in DirectDrawSurface::readData(unsigned int &) C:\blender-git\blender\source\blender\imbuf\intern\dds\DirectDrawSurface.cpp:1126
    #2 0x7ff7c2deebfb in imb_load_dds C:\blender-git\blender\source\blender\imbuf\intern\dds\dds_api.cpp:185
    #3 0x7ff7bf54229b in IMB_ibImageFromMemory C:\blender-git\blender\source\blender\imbuf\intern\readimage.c:120
    #4 0x7ff7bf542bab in IMB_loadifffile C:\blender-git\blender\source\blender\imbuf\intern\readimage.c:198
    #5 0x7ff7bf54291a in IMB_loadiffname C:\blender-git\blender\source\blender\imbuf\intern\readimage.c:239
    #6 0x7ff7bdd3a46c in load_image_single C:\blender-git\blender\source\blender\blenkernel\intern\image.c:4436
    #7 0x7ff7bdd3acad in image_load_image_file C:\blender-git\blender\source\blender\blenkernel\intern\image.c:4499
    #8 0x7ff7bdd2ec29 in image_acquire_ibuf C:\blender-git\blender\source\blender\blenkernel\intern\image.c:4992
    #9 0x7ff7bdd1dfce in BKE_image_acquire_ibuf C:\blender-git\blender\source\blender\blenkernel\intern\image.c:5075
    #10 0x7ff7c1b4908a in uiTemplateImageInfo C:\blender-git\blender\source\blender\editors\space_image\image_buttons.c:1208
    #11 0x7ff7c1b46ee5 in uiTemplateImage C:\blender-git\blender\source\blender\editors\space_image\image_buttons.c:910
    #12 0x7ff7c1ba60bf in node_shader_buts_tex_image_ex C:\blender-git\blender\source\blender\editors\space_node\drawnode.c:768
    #13 0x7ff7c011b6b9 in rna_NodeInternal_draw_buttons_ext C:\blender-git\blender\source\blender\makesrna\intern\rna_nodetree.c:3253
    #14 0x7ff7c01a915b in NodeInternal_draw_buttons_ext_call C:\blender-git\build_windows_x64_vc16_Debug\source\blender\makesrna\intern\rna_nodetree_gen.c:43913
    #15 0x7ff7c003b858 in RNA_function_call C:\blender-git\blender\source\blender\makesrna\intern\rna_access.c:7550
    #16 0x7ff7c091dc02 in pyrna_func_call C:\blender-git\blender\source\blender\python\intern\bpy_rna.c:6360
    #17 0x7fffd1d764d6  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x1802864d6)
    #18 0x7fffd202cbb9  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x18053cbb9)
    #19 0x7fffd202d1d1  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x18053d1d1)
    #20 0x7fffd2028465  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x180538465)
    #21 0x7fffd2021b79  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x180531b79)
    #22 0x7fffd1d74945  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x180284945)
    #23 0x7fffd1d73e79  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x180283e79)
    #24 0x7fffd1d74c82  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x180284c82)
    #25 0x7fffd1d73347  (C:\blender-git\build_windows_x64_vc16_Debug\bin\Debug\python39_d.dll+0x180283347)
    #26 0x7ff7c0922f76 in bpy_class_call C:\blender-git\blender\source\blender\python\intern\bpy_rna.c:8567
    #27 0x7ff7c04ff469 in panel_draw C:\blender-git\blender\source\blender\makesrna\intern\rna_ui.c:143
    #28 0x7ff7c09d08e5 in ed_panel_draw C:\blender-git\blender\source\blender\editors\screen\area.c:2740

SUMMARY: AddressSanitizer: heap-buffer-overflow C:\blender-git\blender\source\blender\imbuf\intern\dds\FlipDXT.cpp:59 in FlipDXT1BlockFull
Shadow bytes around the buggy address:
  0x047b4f9ead70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x047b4f9ead80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x047b4f9ead90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x047b4f9eada0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x047b4f9eadb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x047b4f9eadc0:[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x047b4f9eadd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x047b4f9eade0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x047b4f9eadf0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x047b4f9eae00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x047b4f9eae10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
  Shadow gap:              cc

Here is the rar file directly uploaded to the tracker.


Tested using:
version: 2.93.0 Alpha, branch: master, commit date: 2021-03-26 21:30, hash: 9b87d3f02962
OS: Windows-10-10.0.19041.630-SP0 64 Bits
GPU: GeForce GTX 470/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 391.35
CPU: i7-950 @3.07 GHz SSE2 SSE3 SSE41
RAM: 8.00 GB

Evan Wilson (EAW) renamed this task from doesn't really handle dds files or dxt or s3tc (glslang) compression to Heap Buffer Overflow when viewing dds thumbnails in the file browser..Sat, Mar 27, 6:59 AM
Evan Wilson (EAW) updated the task description. (Show Details)