Search Issue Tracker

Won't Fix

Votes

1

Found in

2017.4.0f1

2018.3.0a1

2018.3.6f1

2019.1.0a1

2019.2.0a1

Issue ID

1137924

Regression

No

[Crash] UNITY_LZ4_decompress_safe crash when calling AssetBundle.RecompressAssetBundleAsync with a modified Asset Bundle

Asset Bundles

-

Steps to reproduce:
1. Open user-supplied project ("Asset Bundle Recompressor.zip")
2. Download user-supplied Asset Bundle ("StandaloneWindows - Copy")
3. Run the project
4. Select 'Browse for file...', find the Asset Bundle and press 'Go'

Reproduced in: 2017.4.24f1, 2018.3.10f1, 2019.1.0b8, 2019.2.0a9

It seems that the user changed the compressed block size of the Asset Bundle

  1. Resolution Note:

    Crash is inside the lz4 decompressor itself. Downloaded bundles should be validated using the CRC validation APIs (or a custom hash / verification method if not using Unity web request) before being passed into the Recompress API.

Add comment

Log in to post comment

All about bugs

View bugs we have successfully reproduced, and vote for the bugs you want to see fixed most urgently.