Arch Linux

Same behaviour when using a file manager (tested with Nautilus 3.16.2 and PCManFM 1.2.3-1) and Jasper 1.900.1-14.
When accessing an external disk I get:
nautilus: jas_stream.c:1044: mem_write: Assertion `ret == cnt' failed.
[1] 13760 abort (core dumped) nautilus
Error disappears after downgrading to 1.900.1-13

The problem is the ASA patch "jasper-1.900.1-CVE-2015-5203.patch" added in 1.900.1-14. This patch is supposed to "Prevent integer conversion errors." security vulnerability. Due to this patch, Geeqie (among others like Ristretto) can't display JP2 (JPC, etc.) files anymore. I dug from geeqie through gdk-pixbuf2 to jasper and finally this patch as the culprit.

The problem is that the function jas_stream_memopen has been changed:

-jas_stream_t *jas_stream_memopen(char *buf, int bufsize);
+jas_stream_t *jas_stream_memopen(char *buf, size_t bufsize);

size_t is basically *unsigned* long integer, but this function offers a feature where if the bufsize is *negative* the buffer starts as very small and is allowed to grow as needed. gdk-pixbuf2 uses this feature for all image formats handled by jasper. However as size_t represents only positive numbers, a conversion takes place to some very high number and the allocation fails. Also, as the function checks the sign, which is now always positive or zero, this feature becomes *completely* unavailable.

IMO the right solution would be to add a parameter to the function whether the buffer is allowed to grow or not, but that would require patching all the dependent packages. The quick solution is to downgrade to 1.900.1-13 and live with the security hole :P.

Ideas?

https://bugzilla.redhat.com/show_bug.cgi?id=1254242#c4 has a slightly different patch.