Search Issue Tracker
Won't Fix
Votes
1
Found in
2017.4.0f1
2018.3.0a1
2018.3.6f1
2019.1.0a1
2019.2.0a1
Issue ID
1137924
Regression
No
[Crash] UNITY_LZ4_decompress_safe crash when calling AssetBundle.RecompressAssetBundleAsync with a modified Asset Bundle
Steps to reproduce:
1. Open user-supplied project ("Asset Bundle Recompressor.zip")
2. Download user-supplied Asset Bundle ("StandaloneWindows - Copy")
3. Run the project
4. Select 'Browse for file...', find the Asset Bundle and press 'Go'
Reproduced in: 2017.4.24f1, 2018.3.10f1, 2019.1.0b8, 2019.2.0a9
It seems that the user changed the compressed block size of the Asset Bundle
Add comment
All about bugs
View bugs we have successfully reproduced, and vote for the bugs you want to see fixed most urgently.
Latest issues
- Out-of-bounds memory access with multiple CanvasRenderers under a Canvas when using Mesh API
- Inspector tries to access file after it was deleted when the file was locked in Inspector window
- Changing Transform values in Search window Inspector loses focus while dragging and stopping mouse without releasing dragging action
- Saving changes on the dirty VFX Graph during the Play mode throws "The referenced script (Unknown) on this Behaviour is missing!" warnings
- VFX Graph Debug Info overlaps the "Initialize" block debug info by default
Resolution Note:
Crash is inside the lz4 decompressor itself. Downloaded bundles should be validated using the CRC validation APIs (or a custom hash / verification method if not using Unity web request) before being passed into the Recompress API.