From 4f109d12924d1ac5e097e3fec707274cfbb5d7ec Mon Sep 17 00:00:00 2001 From: Roman Donchenko Date: Fri, 6 Sep 2013 16:02:41 +0400 Subject: [PATCH] Fixed a memory access error in CV_Remap_Test::generate_test_data. begin_x[1] is not the second component of the element, but the element after the one pointed to begin_x. When begin_x points to the last element, that line overwrites data past the end of the allocation, which, during my tests, happened to contain the reference count for the matrix. Hilarity ensues. --- modules/imgproc/test/test_imgwarp_strict.cpp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/imgproc/test/test_imgwarp_strict.cpp b/modules/imgproc/test/test_imgwarp_strict.cpp index 59b851c45..064ba9356 100644 --- a/modules/imgproc/test/test_imgwarp_strict.cpp +++ b/modules/imgproc/test/test_imgwarp_strict.cpp @@ -679,8 +679,8 @@ void CV_Remap_Test::generate_test_data() MatIterator_ begin_x = mapx.begin(), end_x = mapx.end(); for ( ; begin_x != end_x; ++begin_x) { - begin_x[0] = static_cast(rng.uniform(static_cast(_n), std::max(src.cols + n - 1, 0))); - begin_x[1] = static_cast(rng.uniform(static_cast(_n), std::max(src.rows + n - 1, 0))); + (*begin_x)[0] = static_cast(rng.uniform(static_cast(_n), std::max(src.cols + n - 1, 0))); + (*begin_x)[1] = static_cast(rng.uniform(static_cast(_n), std::max(src.rows + n - 1, 0))); } if (interpolation != INTER_NEAREST)