heap-buffer-overflow in piex::GetFullCropDimension(piex::tiff directory::TiffDirectory

heap-buffer-overflow in piex::GetFullCropDimension(piex::tiff directory::TiffDirectory: a task in MiMo-V2.6-RL-oss: Agentic RL Environments (MiMo RL release). AddressSanitizer: heap-buffer-overflow in function piex::GetFullCropDimension(piex::tiff directory::TiffDirectory const&, unsigned int…

The task

AddressSanitizer: heap-buffer-overflow in function piex::GetFullCropDimension(piex::tiff_directory::TiffDirectory const&, unsigned int, unsigned int) in file skia/third_party/externals/piex/src/tiff_parser.cc

Part of XiaomiMiMo/MiMo-V2.6-RL-oss.