I did fuzz runs using the fuzz_decode fuzz target with Rust overflow checks enabled and detected three different panics/issues:
- jpeg-decoder/src/decoder.rs:1025:28 attempt to multiply with overflow
- jpeg-decoder/src/decoder.rs:911:16 attempt to multiply with overflow
- jpeg-decoder/src/decoder.rs:916:20 attempt to multiply with overflow
I have attached an archive with stack traces and the respective input files generated by the fuzzer.
jpeg-decoder_panics.zip