Recent changes to bugs

#252 SECURITY - OBJ import crashes on IEEE754 special values in vertex coordinates (nan/inf/1e999) — e3d_obj.erl:391

2026-04-10T02:55:05.964000Z

Thanks for reporting and well detailed information.

All the best.

SECURITY - OBJ import crashes on IEEE754 special values in vertex coordinates (nan/inf/1e999) — e3d_obj.erl:391

2026-03-31T13:02:44.094000Z

Summary

Wings3D 2.4.1 crashes when importing a Wavefront OBJ file containing
IEEE754 special float values (nan, inf, -inf) or overflow exponents
(1e999) in vertex coordinate fields.

Affected Version

Wings3D 2.4.1 (latest) — macOS, Linux, Windows (platform-independent
Erlang source code)

Root Cause

The function str2float_2/2 in e3d_obj.erl (line 391) parses vertex
coordinate strings using Erlang pattern matching. It has no clause
to handle the strings "nan", "inf", "-inf", or exponents that
overflow to infinity (e.g. 1e999). When encountered, Erlang raises
an unhandled function_clause exception which crashes the application.

Crash Call Stack (from ~/wings_crash.dump)

Reason: function_clause
e3d_obj:'-str2float_2/2-fun-0-'  [e3d_obj.erl:391]
e3d_obj:str2float_2/2            [e3d_obj.erl:391]
e3d_obj:parse/2                  [e3d_obj.erl:212]
e3d_obj:read_1/4                 [e3d_obj.erl:195]
e3d_obj:import_1/2               [e3d_obj.erl:59]
e3d_obj:import/1                 [e3d_obj.erl:46]

Confirmed Trigger Values

All of the following in any vertex coordinate field crash Wings3D:

v nan nan nan
v inf inf inf
v -inf -inf -inf
v 1.0e999 0.0 0.0

Reproduction Steps

Save the attached cube-nan.obj to disk
Open Wings3D 2.4.1
File > Import > OBJ > select cube-nan.obj
Observe: Internal Error dialog appears immediately
Crash dump written to ~/wings_crash.dump

Suggested Fix

Add handling for IEEE754 special value strings in str2float_2/2
before the character-by-character pattern matching begins, or
wrap the parser in a try/catch returning a safe default (0.0)
on failure. Example:

case string:to_lower(Str) of
    "nan" ++ _ -> 0.0;
    "inf" ++ _ -> 0.0;
    _ -> existing_parsing_logic
end.

Alternatively use Erlang's built-in list_to_float/1 wrapped in
a try/catch block.

Reporter

Dr. Mohammadreza Ashouri
ByteScan Security Research
bytescan.net | audit@bytescan.net
CVE request submitted to MITRE (pending ID assignment)

#251 Forum new registrations failure

2021-08-10T22:40:16.274000Z

The mail server is down for sure. I told it was in 2019, but I just checked the replay to my ticket in that time and it was 2017 instead, sorry about that.
They gave me this answer:

We had to disable that feature (as well as all script external communication due to hacked out of date scripts) due to tightening anti-spam legislation around the world.

It was out of our control as we do have to comply with all local and some international laws.

We apologize for the inconvenice.

About the 504 error that happens sometime, I tried the follow command - which is something we can do on the our side - and I'm waiting to see any "improvement":

ipconfig /flushdns

I also took a look at the .htaccess again and I found a too short value to the Cache-Control max-age and adjusted it, although this was set a couple of years and I don't think it can be the cause for the current issues we have been facing.

I have been experiencing the issue eventually - and I access the forum every single day. Maybe the internet bandwidth can potentialize the problem. I hope you can be try to make your register at any other time again.

In the meanwhile, if you need some help you can find me at Twitter or the Wings3D Official at Discord.

Best regards

#251 Forum new registrations failure

2021-08-09T18:52:46.820000Z

Hi despite best efforts I could not get past the registration screen so am still not registered.

An option for future would be that I donate part of my reseller account and set you up as a user.
I'd need to know the bandwidth this is possibly not a great option, as you really need to own your own account to avoid relying on others.

I still think there are PHP scripting problems on your site though did you check that it hasnt been hacked? Mine was a few weeks ago and I had to do a total rebuild of the site affected.
Regards,
Al.

#251 Forum new registrations failure

2021-08-09T16:11:42.966000Z

Hi Alistair George

Thanks for report. That .htaccess file tip was already checked - everything is OK
I've been noticed too many unavailable service this year. It has becoming common alternate between 404 and 503 error making me to refresh the browser for a few time. Very annoying. :-/

In 2019, when SourceForge was acquired by Slashdot Media, they disabled the option to send email using their servers. As all the forum's notification system requires that enabled we no longer are able to automatically notify users or send a validation email for the registration option.

So, in order to get your registration approved we require you to send an email by yourself - as spotted in the Announcement section on the page top which will lead you to the instructions:

Attention: NEW USERS, read this just after you get REGISTERED!
p.s. If you need to RESET your password, please read this post too.

Sorry for that

Best regards
Micheus

#251 Forum new registrations failure

2021-08-09T01:26:34.326000Z

Hi I tried both chrome and firefox, the site seems to be working again now sorry for calling wolf!

Forum new registrations failure

2021-08-09T01:22:29.266000Z

Hi sorry to use bugs, but your forum site is down for new registrations seems to be htaccess problem:
url: http://www.wings3d.com/forum/member.php?action=register

error:
An error has been encountered in accessing this page.

Server: www.wings3d.com
URL path: /forum/member.php
Error notes: Server unable to read htaccess file, denying access to be safe
Error type: 403
Request method: GET
Request query string: action=register
Time: 2021-08-09 01:17:56 UTC (1628471876)

Reporting this problem: The problem you have encountered is with a project web site hosted by SourceForge.net. This issue should be reported to the SourceForge.net-hosted project (not to SourceForge.net).

If this is a severe or recurring/persistent problem, please do one of the following, and provide the error text (numbered 1 through 7, above):

Contact the project via their designated support resources.
Contact the project administrators of this project via email (see the upper right-hand corner of the Project Summary page for their usernames) at user-name@users.sourceforge.net

If you are a maintainer of this web content, please refer to the Site Documentation regarding web services for further assistance.

NOTE: As of 2008-10-23 directory index display has been disabled by default. This option may be re-enabled by the project by placing a file with the name ".htaccess" with this line:

Options +Indexes

#250 Mac OSX 10.10.5 - Crashes on startup

2020-02-20T16:05:52.949000Z

Vincent, sorry for the delay to answer you.
We usually don't use the tickets system for support - that is made at Wings3D's forum: http://www.wings3d.com/forum/

Anyway, the minimal requirement to v2.2.5 is OSX 10.12 - Sierra - in accord with the download page: http://www.wings3d.com/?page_id=84 - so, sorry but it may really not work in your OS.

Best regards
Micheus

Mac OSX 10.10.5 - Crashes on startup

2020-01-11T10:27:19.711000Z

Wings 3D 2.2.5 crashes when I try to start it.

#249 version numbers broken on macOS

2018-11-30T22:42:00.062000Z

Please use the forum, or github for issues we hardly look here anymore.
Just when we are about to make new releases and then it's too late.