Bug 85395 - [pdftohtml] Segfault in GfxState.cc:5878
Summary: [pdftohtml] Segfault in GfxState.cc:5878
Status: RESOLVED FIXED
Alias: None
Product: poppler
Classification: Unclassified
Component: utils (show other bugs)
Version: unspecified
Hardware: All All
: medium normal
Assignee: poppler-bugs
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-10-24 06:54 UTC by MH
Modified: 2016-09-04 13:36 UTC (History)
2 users (show)

See Also:
i915 platform:
i915 features:


Attachments
segfault-GfxState.cc:5878.pdf (2.98 KB, application/pdf)
2014-10-24 06:54 UTC, MH
Details
67-unfuzzed.pdf (2.98 KB, application/pdf)
2014-10-24 06:56 UTC, MH
Details

Note You need to log in before you can comment on or make changes to this bug.
Description MH 2014-10-24 06:54:40 UTC
Created attachment 108336 [details]
segfault-GfxState.cc:5878.pdf

OS: Fedora 20 (running in virtualbox)
Dependencies installed with: yum-builddep poppler
Version: GIT Master
Command line for loop demonstration: 

mkdir out
master/utils/pdftohtml <attached.pdf> out/out

#############################################################################
GDB output:

Reading symbols from /home/foobar/poppler/utils/.libs/lt-pdftohtml...done.
Starting program: /home/foobar/poppler/utils/.libs/lt-pdftohtml segfault-gfxstate.cc-5878-67-pdftohtmlfuzz-11.pdf out/out
Bogus memory allocation size

Program received signal SIGSEGV, Segmentation fault.
GfxImageColorMap::getRGB (this=this@entry=0x6563f0, x=x@entry=0x0, rgb=rgb@entry=0x7fffffffd610) at GfxState.cc:5878
5878          color.c[i] = lookup2[i][x[i]];
Comment 1 MH 2014-10-24 06:56:19 UTC
Created attachment 108337 [details]
67-unfuzzed.pdf

Attached unfuzzed file as per request.
Comment 2 Albert Astals Cid 2016-09-04 13:36:10 UTC
This seems to have been fixed a while back, at least can't reproduce anymore with the git version.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct.