95567 – poppler-0.44.0: stack overflow while rending with pdftohtml

Bug 95567 - poppler-0.44.0: stack overflow while rending with pdftohtml

Summary: poppler-0.44.0: stack overflow while rending with pdftohtml

Status:	RESOLVED FIXED

Alias:	None

Product:	poppler
Classification:	Unclassified
Component:	general (show other bugs)
Version:	unspecified
Hardware:	Other All

Importance:	medium normal
Assignee:	poppler-bugs
QA Contact:

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2016-05-23 21:30 UTC by LE GARREC Vincent
Modified:	2016-05-24 21:20 UTC (History)
CC List:	1 user (show)

See Also:
i915 platform:
i915 features:

Attachments
stackoverflow.pdf (1.59 KB, application/pdf) 2016-05-23 21:31 UTC, LE GARREC Vincent	Details
stackoverflow-2.pdf (5.16 KB, application/pdf) 2016-05-23 22:53 UTC, LE GARREC Vincent	Details
View All

Description LE GARREC Vincent 2016-05-23 21:30:04 UTC

Hi, while fuzzing, pdftohtml crashes with invalid pdf (file enclosed) with poppler-0.43.0 and poppler-0.44.0. 
Libpoppler runs into infinity loop that causes stack overflow.
Sorry, no trivial patch :(.

Output :
…
Syntax Error (525): Bad 'Length' attribute in stream
Syntax Error (457): Dictionary key must be a name object
Syntax Error (471): Dictionary key must be a name object
Syntax Error (488): Dictionary key must be a name object
Syntax Error (525): Bad 'Length' attribute in stream
Syntax Error (457): Dictionary key must be a name object
Syntax Error (471): Dictionary key must be a name object
Syntax Error (488): Dictionary key must be a name object
Syntax Error (525): Bad 'Length' attribute in stream
Syntax Error (457): Dictionary key must be a name object
Syntax Error (471): Dictionary key must be a name object
Syntax Error (488): Dictionary key must be a name object
Syntax Error (525): Bad 'Length' attribute in stream
…


gdb output :
…
#61018 0x00007ffff7a79df9 in XRef::fetch (this=0x662200, num=6, gen=0, obj=0x7fffffffcd30, recursion=0) at XRef.cc:1210
#61019 0x00007ffff7a4815f in Object::fetch (this=0x6784e8, xref=0x662200, obj=0x7fffffffcd30, recursion=0) at Object.cc:122
#61020 0x00007ffff79cf908 in Dict::lookup (this=0x669c60, key=0x7ffff7b2234e "F", obj=0x7fffffffcd30, recursion=0) at Dict.cc:261
#61021 0x00007ffff7995361 in Object::dictLookup (this=0x7fffffffd0f0, key=0x7ffff7b2234e "F", obj=0x7fffffffcd30, recursion=0) at Object.h:330
#61022 0x00007ffff7a5dca0 in Stream::addFilters (this=0x6785e0, dict=0x7fffffffd0f0, recursion=1) at Stream.cc:181
#61023 0x00007ffff7a50446 in Parser::makeStream (this=0x678030, dict=0x7fffffffd0f0, fileKey=0x0, encAlgorithm=(cryptAES256 | unknown: 774974788), 
    keyLength=-1020982732, objNum=6, objGen=0, recursion=1, strict=false) at Parser.cc:277
#61024 0x00007ffff7a4fcf5 in Parser::getObj (this=0x678030, obj=0x7fffffffd0f0, simpleOnly=false, fileKey=0x0, 
    encAlgorithm=(cryptAES256 | unknown: 774974788), keyLength=-1020982732, objNum=6, objGen=0, recursion=0, strict=false) at Parser.cc:131
#61025 0x00007ffff7a79df9 in XRef::fetch (this=0x662200, num=6, gen=0, obj=0x7fffffffd0f0, recursion=0) at XRef.cc:1210
#61026 0x00007ffff7a4815f in Object::fetch (this=0x677a58, xref=0x662200, obj=0x7fffffffd0f0, recursion=0) at Object.cc:122
#61027 0x00007ffff79cf908 in Dict::lookup (this=0x667f50, key=0x7ffff7b2234e "F", obj=0x7fffffffd0f0, recursion=0) at Dict.cc:261
#61028 0x00007ffff7995361 in Object::dictLookup (this=0x7fffffffd4b0, key=0x7ffff7b2234e "F", obj=0x7fffffffd0f0, recursion=0) at Object.h:330
#61029 0x00007ffff7a5dca0 in Stream::addFilters (this=0x677b50, dict=0x7fffffffd4b0, recursion=1) at Stream.cc:181
#61030 0x00007ffff7a50446 in Parser::makeStream (this=0x6775f0, dict=0x7fffffffd4b0, fileKey=0x0, encAlgorithm=(cryptAES256 | unknown: 774974788), 
    keyLength=-1020982732, objNum=6, objGen=0, recursion=1, strict=false) at Parser.cc:277
#61031 0x00007ffff7a4fcf5 in Parser::getObj (this=0x6775f0, obj=0x7fffffffd4b0, simpleOnly=false, fileKey=0x0, 
    encAlgorithm=(cryptAES256 | unknown: 774974788), keyLength=-1020982732, objNum=6, objGen=0, recursion=0, strict=false) at Parser.cc:131
#61032 0x00007ffff7a79df9 in XRef::fetch (this=0x662200, num=6, gen=0, obj=0x7fffffffd4b0, recursion=0) at XRef.cc:1210
#61033 0x00007ffff7a4815f in Object::fetch (this=0x677018, xref=0x662200, obj=0x7fffffffd4b0, recursion=0) at Object.cc:122
#61034 0x00007ffff79cf908 in Dict::lookup (this=0x668620, key=0x7ffff7b2234e "F", obj=0x7fffffffd4b0, recursion=0) at Dict.cc:261
#61035 0x00007ffff7995361 in Object::dictLookup (this=0x7fffffffd8a0, key=0x7ffff7b2234e "F", obj=0x7fffffffd4b0, recursion=0) at Object.h:330
#61036 0x00007ffff7a5dca0 in Stream::addFilters (this=0x677110, dict=0x7fffffffd8a0, recursion=1) at Stream.cc:181
#61037 0x00007ffff7a50446 in Parser::makeStream (this=0x6646f0, dict=0x7fffffffd8a0, fileKey=0x0, encAlgorithm=(cryptAES256 | unknown: 774974788), 
    keyLength=-1020982732, objNum=6, objGen=0, recursion=1, strict=false) at Parser.cc:277
#61038 0x00007ffff7a4fcf5 in Parser::getObj (this=0x6646f0, obj=0x7fffffffd8a0, simpleOnly=false, fileKey=0x0, 
    encAlgorithm=(cryptAES256 | unknown: 774974788), keyLength=-1020982732, objNum=6, objGen=0, recursion=0, strict=false) at Parser.cc:131
#61039 0x00007ffff7a79df9 in XRef::fetch (this=0x662200, num=6, gen=0, obj=0x7fffffffd8a0, recursion=0) at XRef.cc:1210
#61040 0x00007ffff7a4815f in Object::fetch (this=0x663d20, xref=0x662200, obj=0x7fffffffd8a0, recursion=0) at Object.cc:122
#61041 0x00007ffff79b70c8 in Array::get (this=0x663cb0, i=2, obj=0x7fffffffd8a0, recursion=0) at Array.cc:125
#61042 0x00007ffff7997b61 in Object::arrayGet (this=0x7fffffffd880, i=2, obj=0x7fffffffd8a0, recursion=0) at Object.h:303
#61043 0x00007ffff79bd2a5 in Catalog::cachePageTree (this=0x662510, page=3) at Catalog.cc:392
#61044 0x00007ffff79bc919 in Catalog::getPage (this=0x662510, i=3) at Catalog.cc:240
#61045 0x00007ffff7a58f0b in PDFDoc::getPage (this=0x661f70, page=3) at PDFDoc.cc:2024
#61046 0x00007ffff7a518e9 in PDFDoc::displayPage (this=0x661f70, out=0x664be0, page=3, hDPI=108, vDPI=108, rotate=0, useMediaBox=true, crop=false, 
    printing=false, abortCheckCbk=0x0, abortCheckCbkData=0x0, annotDisplayDecideCbk=0x0, annotDisplayDecideCbkData=0x0, copyXRef=false) at PDFDoc.cc:489
#61047 0x00007ffff7a519f6 in PDFDoc::displayPages (this=0x661f70, out=0x664be0, firstPage=1, lastPage=14, hDPI=108, vDPI=108, rotate=0, useMediaBox=true, 
    crop=false, printing=false, abortCheckCbk=0x0, abortCheckCbkData=0x0, annotDisplayDecideCbk=0x0, annotDisplayDecideCbkData=0x0) at PDFDoc.cc:509
#61048 0x00000000004088af in main (argc=3, argv=0x7fffffffdcd8) at pdftohtml.cc:392

Comment 1 LE GARREC Vincent 2016-05-23 21:31:04 UTC

Created attachment 124009 [details]
stackoverflow.pdf

Comment 2 Albert Astals Cid 2016-05-23 22:00:37 UTC

Fix, pushed

Comment 3 LE GARREC Vincent 2016-05-23 22:53:41 UTC

Created attachment 124012 [details]
stackoverflow-2.pdf

Thanks.
I just run again afl with all PDF that make poppler crashes.
It finds another case where there's no crash but a huge stack (size around 3000). Suddenly the stack stops growing and poppler runs into infinity loop. Should I one file a new bug or reopen this one ?

And another thing: do you think that the line:
Stream.cc:5533
dict->dictLookup("DP", &params);
should be
dict->dictLookup("DP", &params, recursion);
like all others calls ?


Thanks for your work.

…
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (448): Dictionary key must be a name object
Syntax Error (448): Dictionary key must be a name object
Syntax Error (448): Dictionary key must be a name object
Syntax Error (448): Dictionary key must be a name object
Syntax Error (448): Dictionary key must be a name object
Syntax Error (448): Dictionary key must be a name object
Syntax Error (448): Dictionary key must be a name object
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (448): Dictionary key must be a name object
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (448): Dictionary key must be a name object
Syntax Error (448): Dictionary key must be a name object
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (448): Dictionary key must be a name object
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (448): Dictionary key must be a name object
Syntax Error (448): Dictionary key must be a name object
Syntax Error (448): Dictionary key must be a name object
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (448): Dictionary key must be a name object
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Filter' attribute in stream
Syntax Error (482): Bad 'Length' attribute in stream
Syntax Error (448): Dictionary key must be a name object
…

gdb (I used CTRL+Z)
#0  0x00007ffff6a01dc3 in __pread_nocancel () at ../sysdeps/unix/syscall-template.S:84
#1  0x00007ffff7a0dcd6 in pread64 (__offset=<optimized out>, __nbytes=<optimized out>, __buf=__buf@entry=0x74f269, __fd=<optimized out>)
    at /usr/include/bits/unistd.h:117
#2  GooFile::read (this=<optimized out>, 
    buf=buf@entry=0x74f269 "6 0 obj\n<</Type/XObject/Subtype/Image/WidthB1/Height 1/BitsPerComponent 8/Length 6 0 R\n/F 6 0 R\n>>\nstream\nx\234c``", 
    n=<optimized out>, offset=<optimized out>) at gfile.cc:648
#3  0x00007ffff78cdb13 in FileStream::fillBuf (this=0x74f200) at Stream.cc:827
#4  0x00007ffff78efe05 in FileStream::getChar (this=0x74f200) at Stream.h:458
#5  0x00007ffff786f8c2 in Object::streamGetChar (this=<optimized out>, this=<optimized out>) at Object.h:363
#6  Lexer::getChar (this=0x74ee30, comesFromLook=false) at Lexer.cc:127
#7  0x00007ffff786fc72 in Lexer::getObj (this=0x74ee30, obj=obj@entry=0x74ef08, objNum=objNum@entry=-1) at Lexer.cc:171
#8  0x00007ffff789cbec in Parser::Parser (this=0x74eef0, xrefA=<optimized out>, lexerA=<optimized out>, allowStreamsA=<optimized out>) at Parser.cc:53
#9  0x00007ffff79360c2 in XRef::fetch (this=0x678140, num=6, gen=0, obj=0x7ffffffbc880, obj@entry=0x0, recursion=recursion@entry=500) at XRef.cc:1172
#10 0x00007ffff7887344 in Object::fetch (this=<optimized out>, xref=<optimized out>, obj=obj@entry=0x0, recursion=recursion@entry=500) at Object.cc:122
#11 0x00007ffff76f0ccd in Dict::lookup (this=<optimized out>, key=key@entry=0x7ffff7b2ff67 "F", obj=0x0, obj@entry=0x7ffffffbc880, 
    recursion=recursion@entry=500) at Dict.cc:261
#12 0x00007ffff78ea34d in Object::dictLookup (this=0x7ffffffbcb40, this=0x7ffffffbcb40, recursion=500, obj=0x7ffffffbc880, key=0x7ffff7b2ff67 "F")
    at Object.h:330
#13 Stream::addFilters (this=this@entry=0x74f060, dict=dict@entry=0x7ffffffbcb40, recursion=recursion@entry=500) at Stream.cc:181
#14 0x00007ffff789dbbe in Parser::makeStream (this=this@entry=0x74e880, dict=dict@entry=0x7ffffffbcb40, fileKey=fileKey@entry=0x0, 
    encAlgorithm=encAlgorithm@entry=(cryptAES256 | unknown: 774974788), keyLength=keyLength@entry=-1020982732, objNum=objNum@entry=6, objGen=0, 
    recursion=500, strict=false) at Parser.cc:277
#15 0x00007ffff789e8cc in Parser::getObj (this=this@entry=0x74e880, obj=obj@entry=0x7ffffffbcb40, simpleOnly=simpleOnly@entry=false, fileKey=0x0, 
    encAlgorithm=(cryptAES256 | unknown: 774974788), keyLength=keyLength@entry=-1020982732, objNum=6, objGen=0, recursion=499, strict=false) at Parser.cc:131
#16 0x00007ffff7936bb1 in XRef::fetch (this=0x678140, num=<optimized out>, gen=<optimized out>, obj=0x7ffffffbcb40, obj@entry=0x6, 
    recursion=recursion@entry=499) at XRef.cc:1210
#17 0x00007ffff7887344 in Object::fetch (this=<optimized out>, xref=<optimized out>, obj=obj@entry=0x6, recursion=recursion@entry=499) at Object.cc:122
#18 0x00007ffff76f0ccd in Dict::lookup (this=<optimized out>, key=key@entry=0x7ffff7b2ff67 "F", obj=0x6, obj@entry=0x7ffffffbcb40, 
    recursion=recursion@entry=499) at Dict.cc:261
#19 0x00007ffff78ea34d in Object::dictLookup (this=0x7ffffffbce00, this=0x7ffffffbce00, recursion=499, obj=0x7ffffffbcb40, key=0x7ffff7b2ff67 "F")
    at Object.h:330
#20 Stream::addFilters (this=this@entry=0x74ec90, dict=dict@entry=0x7ffffffbce00, recursion=recursion@entry=499) at Stream.cc:181
#21 0x00007ffff789dbbe in Parser::makeStream (this=this@entry=0x74e2e0, dict=dict@entry=0x7ffffffbce00, fileKey=fileKey@entry=0x0, 
    encAlgorithm=encAlgorithm@entry=(cryptAES256 | unknown: 774974788), keyLength=keyLength@entry=-1020982732, objNum=objNum@entry=6, objGen=0, 
    recursion=499, strict=false) at Parser.cc:277
#22 0x00007ffff789e8cc in Parser::getObj (this=this@entry=0x74e2e0, obj=obj@entry=0x7ffffffbce00, simpleOnly=simpleOnly@entry=false, fileKey=0x0, 
    encAlgorithm=(cryptAES256 | unknown: 774974788), keyLength=keyLength@entry=-1020982732, objNum=6, objGen=0, recursion=498, strict=false) at Parser.cc:131
#23 0x00007ffff7936bb1 in XRef::fetch (this=0x678140, num=<optimized out>, gen=<optimized out>, obj=0x7ffffffbce00, obj@entry=0x6, 
    recursion=recursion@entry=498) at XRef.cc:1210
#24 0x00007ffff7887344 in Object::fetch (this=<optimized out>, xref=<optimized out>, obj=obj@entry=0x6, recursion=recursion@entry=498) at Object.cc:122
#25 0x00007ffff76f0ccd in Dict::lookup (this=<optimized out>, key=key@entry=0x7ffff7b2ff67 "F", obj=0x6, obj@entry=0x7ffffffbce00, 
    recursion=recursion@entry=498) at Dict.cc:261
#26 0x00007ffff78ea34d in Object::dictLookup (this=0x7ffffffbd0c0, this=0x7ffffffbd0c0, recursion=498, obj=0x7ffffffbce00, key=0x7ffff7b2ff67 "F")
    at Object.h:330
#27 Stream::addFilters (this=this@entry=0x74de50, dict=dict@entry=0x7ffffffbd0c0, recursion=recursion@entry=498) at Stream.cc:181
#28 0x00007ffff789dbbe in Parser::makeStream (this=this@entry=0x74db30, dict=dict@entry=0x7ffffffbd0c0, fileKey=fileKey@entry=0x0, 
    encAlgorithm=encAlgorithm@entry=(cryptAES256 | unknown: 774974788), keyLength=keyLength@entry=-1020982732, objNum=objNum@entry=6, objGen=0, 
    recursion=498, strict=false) at Parser.cc:277
#29 0x00007ffff789e8cc in Parser::getObj (this=this@entry=0x74db30, obj=obj@entry=0x7ffffffbd0c0, simpleOnly=simpleOnly@entry=false, fileKey=0x0, 
    encAlgorithm=(cryptAES256 | unknown: 774974788), keyLength=keyLength@entry=-1020982732, objNum=6, objGen=0, recursion=497, strict=false) at Parser.cc:131
#30 0x00007ffff7936bb1 in XRef::fetch (this=0x678140, num=<optimized out>, gen=<optimized out>, obj=0x7ffffffbd0c0, obj@entry=0x6, 
    recursion=recursion@entry=497) at XRef.cc:1210
#31 0x00007ffff7887344 in Object::fetch (this=<optimized out>, xref=<optimized out>, obj=obj@entry=0x6, recursion=recursion@entry=497) at Object.cc:122
#32 0x00007ffff76f0ccd in Dict::lookup (this=<optimized out>, key=key@entry=0x7ffff7b2ff67 "F", obj=0x6, obj@entry=0x7ffffffbd0c0, 
    recursion=recursion@entry=497) at Dict.cc:261
#33 0x00007ffff78ea34d in Object::dictLookup (this=0x7ffffffbd390, this=0x7ffffffbd390, recursion=497, obj=0x7ffffffbd0c0, key=0x7ffff7b2ff67 "F")
    at Object.h:330
…
#3008 0x00007ffff789d427 in Object::dictLookup (key=0x7ffff7b15f2d "Length", this=0x7fffffffd550, this=0x7fffffffd550, recursion=3, obj=0x7fffffffd340)
    at Object.h:330
#3009 Parser::makeStream (this=this@entry=0x67c7d0, dict=dict@entry=0x7fffffffd550, fileKey=fileKey@entry=0x0, 
    encAlgorithm=encAlgorithm@entry=(cryptAES256 | unknown: 774974788), keyLength=keyLength@entry=-1020982732, objNum=objNum@entry=6, objGen=0, recursion=3, 
    strict=false) at Parser.cc:209
#3010 0x00007ffff789e8cc in Parser::getObj (this=this@entry=0x67c7d0, obj=obj@entry=0x7fffffffd550, simpleOnly=simpleOnly@entry=false, fileKey=0x0, 
    encAlgorithm=(cryptAES256 | unknown: 774974788), keyLength=keyLength@entry=-1020982732, objNum=6, objGen=0, recursion=2, strict=false) at Parser.cc:131
#3011 0x00007ffff7936bb1 in XRef::fetch (this=0x678140, num=<optimized out>, gen=<optimized out>, obj=0x7fffffffd550, obj@entry=0x6, 
    recursion=recursion@entry=2) at XRef.cc:1210
#3012 0x00007ffff7887344 in Object::fetch (this=<optimized out>, xref=<optimized out>, obj=obj@entry=0x6, recursion=recursion@entry=2) at Object.cc:122
---Type <return> to continue, or q <return> to quit---
#3013 0x00007ffff76f0ccd in Dict::lookup (this=<optimized out>, key=key@entry=0x7ffff7b15f2d "Length", obj=0x6, obj@entry=0x7fffffffd550, 
    recursion=recursion@entry=2) at Dict.cc:261
#3014 0x00007ffff789d427 in Object::dictLookup (key=0x7ffff7b15f2d "Length", this=0x7fffffffd760, this=0x7fffffffd760, recursion=2, obj=0x7fffffffd550)
    at Object.h:330
#3015 Parser::makeStream (this=this@entry=0x67c1e0, dict=dict@entry=0x7fffffffd760, fileKey=fileKey@entry=0x0, 
    encAlgorithm=encAlgorithm@entry=(cryptAES256 | unknown: 774974788), keyLength=keyLength@entry=-1020982732, objNum=objNum@entry=6, objGen=0, recursion=2, 
    strict=false) at Parser.cc:209
#3016 0x00007ffff789e8cc in Parser::getObj (this=this@entry=0x67c1e0, obj=obj@entry=0x7fffffffd760, simpleOnly=simpleOnly@entry=false, fileKey=0x0, 
    encAlgorithm=(cryptAES256 | unknown: 774974788), keyLength=keyLength@entry=-1020982732, objNum=6, objGen=0, recursion=1, strict=false) at Parser.cc:131
#3017 0x00007ffff7936bb1 in XRef::fetch (this=0x678140, num=<optimized out>, gen=<optimized out>, obj=0x7fffffffd760, obj@entry=0x6, 
    recursion=recursion@entry=1) at XRef.cc:1210
#3018 0x00007ffff7887344 in Object::fetch (this=<optimized out>, xref=<optimized out>, obj=obj@entry=0x6, recursion=recursion@entry=1) at Object.cc:122
#3019 0x00007ffff76f0ccd in Dict::lookup (this=<optimized out>, key=key@entry=0x7ffff7b15f2d "Length", obj=0x6, obj@entry=0x7fffffffd760, 
    recursion=recursion@entry=1) at Dict.cc:261
#3020 0x00007ffff789d427 in Object::dictLookup (key=0x7ffff7b15f2d "Length", this=0x7fffffffd9a0, this=0x7fffffffd9a0, recursion=1, obj=0x7fffffffd760)
    at Object.h:330
#3021 Parser::makeStream (this=this@entry=0x67b5d0, dict=dict@entry=0x7fffffffd9a0, fileKey=fileKey@entry=0x0, 
    encAlgorithm=encAlgorithm@entry=(cryptAES256 | unknown: 774974788), keyLength=keyLength@entry=-1020982732, objNum=objNum@entry=6, objGen=0, recursion=1, 
    strict=false) at Parser.cc:209
#3022 0x00007ffff789e8cc in Parser::getObj (this=this@entry=0x67b5d0, obj=obj@entry=0x7fffffffd9a0, simpleOnly=simpleOnly@entry=false, fileKey=0x0, 
    encAlgorithm=(cryptAES256 | unknown: 774974788), keyLength=keyLength@entry=-1020982732, objNum=6, objGen=0, recursion=0, strict=false) at Parser.cc:131

#3023 0x00007ffff7936bb1 in XRef::fetch (this=0x678140, num=<optimized out>, gen=<optimized out>, obj=0x7fffffffd9a0, recursion=0) at XRef.cc:1210
#3024 0x00007ffff7887344 in Object::fetch (this=<optimized out>, xref=<optimized out>, obj=<optimized out>, recursion=<optimized out>) at Object.cc:122
#3025 0x00007ffff76a6661 in Array::get (this=<optimized out>, i=i@entry=0, obj=obj@entry=0x7fffffffd9a0, recursion=recursion@entry=0) at Array.cc:125
#3026 0x00007ffff76b9342 in Object::arrayGet (recursion=0, this=0x7fffffffd980, this=0x7fffffffd980, obj=0x7fffffffd9a0, i=0) at Object.h:303
#3027 Catalog::cachePageTree (this=this@entry=0x678450, page=page@entry=1) at Catalog.cc:392
#3028 0x00007ffff76bb23a in Catalog::getPage (this=0x678450, i=i@entry=1) at Catalog.cc:240
#3029 0x00007ffff78b1c3d in PDFDoc::getPage (this=this@entry=0x677eb0, page=page@entry=1) at PDFDoc.cc:2024

#3030 0x00007ffff78b1fd2 in PDFDoc::displayPage (this=this@entry=0x677eb0, out=out@entry=0x678ec0, page=page@entry=1, hDPI=hDPI@entry=108, 
    vDPI=vDPI@entry=108, rotate=rotate@entry=0, useMediaBox=useMediaBox@entry=true, crop=crop@entry=false, printing=false, abortCheckCbk=0x0, 
    abortCheckCbkData=0x0, annotDisplayDecideCbk=0x0, annotDisplayDecideCbkData=0x0, copyXRef=false) at PDFDoc.cc:489
#3031 0x00007ffff78b2287 in PDFDoc::displayPages (this=this@entry=0x677eb0, out=out@entry=0x678ec0, firstPage=1, lastPage=17, hDPI=108, vDPI=108, 
    rotate=rotate@entry=0, useMediaBox=useMediaBox@entry=true, crop=false, printing=false, abortCheckCbk=0x0, abortCheckCbkData=0x0, 
    annotDisplayDecideCbk=0x0, annotDisplayDecideCbkData=0x0) at PDFDoc.cc:509

Comment 4 Albert Astals Cid 2016-05-24 21:20:13 UTC

That'd be a different bug.

About adding the recursion value to other calls, if you can provide a pdf that shows its need, we'll add it.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.