| Summary: | [pdftops] Segfault in FoFiTrueType.cc:1248 | ||
|---|---|---|---|
| Product: | poppler | Reporter: | MH <ravdune+bugzilla> |
| Component: | utils | Assignee: | poppler-bugs <poppler-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | |
| Severity: | normal | ||
| Priority: | medium | CC: | fdo-bugs |
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | All | ||
| Whiteboard: | |||
| i915 platform: | i915 features: | ||
| Attachments: |
segfault-FoFiTrueType.cc:1248.pdf
42-unfuzzed.pdf |
||
Created attachment 108181 [details]
42-unfuzzed.pdf
Attached unfuzzed file as per request.
Fix pushed |
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.
Created attachment 108119 [details] segfault-FoFiTrueType.cc:1248.pdf OS: Fedora 20 (running in virtualbox) Dependencies installed with: yum-builddep poppler Version: GIT Master Command line: master/utils/pdftops <attached.pdf> /dev/null ############################################################################### GDB output: Starting program: /home/foobar/poppler/utils/.libs/lt-pdftops segfault-fofitruetype.cc-1248-42-pdftopsfuzz-20.pdf /dev/null Program received signal SIGSEGV, Segmentation fault. FoFiTrueType::dumpString (this=<optimized out>, s=0x7fffffffd820 "", length=14394, outputFunc=0x7ffff7ac7f30 <outputToFile(void*, char const*, int)>, outputStream=0x642240) at FoFiTrueType.cc:1248 1248 buf = GooString::format("{0:02x}", s[i+j] & 0xff);