| Summary: | poppler: OBJECT_TYPE_CHECK abort when reading /Matrix | ||
|---|---|---|---|
| Product: | poppler | Reporter: | Tomas Hoger <thoger> |
| Component: | general | Assignee: | poppler-bugs <poppler-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | |
| Severity: | normal | ||
| Priority: | medium | ||
| Version: | unspecified | ||
| Hardware: | Other | ||
| OS: | All | ||
| Whiteboard: | |||
| i915 platform: | i915 features: | ||
| Attachments: | Reproducer | ||
|
Description
Tomas Hoger
2010-10-03 11:50:59 UTC
Created attachment 39146 [details]
Reproducer
Triggers abort in Gfx::doForm.
Fixed. There are tons of these, feel free to search them and open new bugs with pdf reproducers. Sorry, my report was probably confusing. There are 3 instanced of /BBox and /Matrix reading code in Gfx.cc. 2 BBox instances were fixed in 2fe825deac, this one remains without checks: http://cgit.freedesktop.org/poppler/poppler/tree/poppler/Gfx.cc?id=d690bea9#n1253 2 Matrix instances were fixed in d690bea929, one was missed: http://cgit.freedesktop.org/poppler/poppler/tree/poppler/Gfx.cc?id=d690bea9#n4703 I don't have reproducers for these, sorry. To be fair, without reproducers i prefer to focus my little time in poppler to develop actual features (In reply to comment #3) > 2 BBox instances were fixed in 2fe825deac, this one remains without checks: > http://cgit.freedesktop.org/poppler/poppler/tree/poppler/Gfx.cc?id=d690bea9#n1253 This one is now fixed via: http://cgit.freedesktop.org/poppler/poppler/commit/?id=bcb13ed582 http://lists.freedesktop.org/archives/poppler/2010-October/006565.html |
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.