Search Issue Tracker

Won't Fix

Votes

1

Found in

2017.4.0f1

2018.3.0a1

2018.3.6f1

2019.1.0a1

2019.2.0a1

Issue ID

1137924

Regression

No

[Crash] UNITY_LZ4_decompress_safe crash when calling AssetBundle.RecompressAssetBundleAsync with a modified Asset Bundle

Asset Bundles

-

Steps to reproduce:
1. Open user-supplied project ("Asset Bundle Recompressor.zip")
2. Download user-supplied Asset Bundle ("StandaloneWindows - Copy")
3. Run the project
4. Select 'Browse for file...', find the Asset Bundle and press 'Go'

Reproduced in: 2017.4.24f1, 2018.3.10f1, 2019.1.0b8, 2019.2.0a9

It seems that the user changed the compressed block size of the Asset Bundle

  1. Resolution Note:

    Crash is inside the lz4 decompressor itself. Downloaded bundles should be validated using the CRC validation APIs (or a custom hash / verification method if not using Unity web request) before being passed into the Recompress API.

Add comment

Log in to post comment