Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizens Jini Timmy, suitcase, empty mountain bird song, Yunkuan AIit, slightly understand ol, refund elder brother continue to return, FORY, a piercing arrow, Windows9 post bar administrator's clue delivery! CTOnews.com, April 26 (Xinhua) A picture of a QR code has gone viral across the Internet recently, according to contributions from CTOnews.com users. Opening the picture (or long press) in Wechat will cause Wechat to flash, Wechat will enter safe mode for many times in a row, and the account will be forced to log out.

According to the latest news from the OpenCV China team, this Bug appeared in Wechat's code scanning engine (CTOnews.com Note: the Wechat team opened up its code scanning engine on OpenCV in 2021).

According to the memory read and write Bug discovered by GitHub users Konano and GZTimeWalker, maliciously crafted images can cause the wechat_qrcode module to crash through invalid memory access.

The problem occurs in DecodedBitStreamParser::decodeByteSegment. As shown in the following code, if the incoming parameter bits_ is a ByteSegment with empty content but non-zero length, bits.available () returns 0, and then count is updated to 0, but nBytes is not updated and remains non-zero. This will cause the later append function to access the null pointer readBytes to read nBytes data, resulting in the termination of the program.

At present, this Bug has been fixed by user-submitted code, and the speed of open source is still very fast. CTOnews.com partners can check for updates in Wechat for hot patches to fix, and those who do not receive can wait a moment.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.