Description

This bug was reported by Nurulize on UDN:

 

UPackage::Save calls FMD5::Update at line 5918

The bug comes from the fact that Writer->TotalSize() is int64 vs the 2nd parameter of FMD5::Update which is an int32.

If the file is bigger than 2^31, FMD5::Update might receive a negative value and will crash on the final memcpy.

 

 

 

Steps to Reproduce

No easy repro. The bug happens in UPackage::Save when the package is bigger than 2^31

Have Comments or More Details?

There's no existing public thread on this issue, so head over to Questions & Answers just mention UE-67856 in the post.

1
Login to Vote

Fixed
ComponentUE - Foundation - Core - Cooker
Affects Versions4.21
Target Fix4.22
Fix Commit4723489
Main Commit6815521
CreatedDec 21, 2018
ResolvedFeb 28, 2019
UpdatedJun 3, 2019
View Jira Issue