Created attachment 96089 [details] An example .pdf document that causes a pdftoppm crash pdftoppm 0.24.5 crashes, when processing the attached file with the following parameters: pdftoppm -scale-to-x 768 -scale-to-y 992 crash.pdf crash When compiled with DEBUG_MEM enabled, the following error message is shown: Overwrite past end of block xxx at address yyy The .pdf contains a single image of size 67x1 within a Form XObject. The crash occurs only for certain -scale-to-x and -scale-to-y values. Presumably, for such scalings, the amount of memory allocated is incorrect.
Fixed in master for next release
(In reply to comment #1) > Fixed in master for next release Thank you! You made the fix in Splash::arbitraryTransformImage. There seems to be a similar test rect in Splash::arbitraryTransformMask. Is that incorrect, as well?
It may be, but without a document that exercises it i prefer to be cautios in this kind of changes.
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.