[Poppler-bugs] [Bug 22517] New: poppler crashes due to corrupted matrix structure

[bugzilla-daemon at freedesktop.org]

http://bugs.freedesktop.org/show_bug.cgi?id=22517

           Summary: poppler crashes due to corrupted matrix structure
           Product: poppler
           Version: unspecified
          Platform: Other
        OS/Version: Linux (All)
            Status: NEW
          Severity: major
          Priority: high
         Component: general
        AssignedTo: poppler-bugs at lists.freedesktop.org
        ReportedBy: igorenbein at finjan.com


Poppler 0.10.6 crashes at Object.h double getNum() {
OBJECT_2TYPES_CHECK(objInt, objReal); return type == objInt ? (double)intg :
real; } function.

Test file: http://www.districtboston.com/pdfs/Press_04.pdf 

Object (182 0) has a corrupted 'Matrix' structure.


Call stack:

#0  0xb72d8947 in raise () from /lib/tls/libc.so.6
(gdb) bt
#0  0xb72d8947 in raise () from /lib/tls/libc.so.6
#1  0xb72da0c9 in abort () from /lib/tls/libc.so.6
#2  0xb58f7bfb in Gfx::drawAnnot (this=0x81da710, str=0x86ffd960, border=0x0,
aColor=0x0, xMin=226, yMin=592, xMax=258, yMax=609) at Object.h:192
#3  0xb58cab4d in AnnotWidget::draw (this=0x81be490, gfx=0x81da710, printing=0)
at Annot.cc:3170
#4  0xb593853e in Page::displaySlice (this=0x81dc0b0, out=0x808aac8, hDPI=72,
vDPI=72, rotate=0, useMediaBox=0, crop=0, sliceX=-1, sliceY=-1, sliceW=-1,
    sliceH=-1, printing=0, catalog=0x81b6af8, abortCheckCbk=0,
abortCheckCbkData=0x0, annotDisplayDecideCbk=0, annotDisplayDecideCbkData=0x0)
at Page.cc:460
#5  0xb5938685 in Page::display (this=0x81dc0b0, out=0x808aac8, hDPI=72,
vDPI=72, rotate=0, useMediaBox=0, crop=0, printing=0, catalog=0x81b6af8,
    abortCheckCbk=0, abortCheckCbkData=0x0, annotDisplayDecideCbk=0,
annotDisplayDecideCbkData=0x0) at Page.cc:371


-- 
Configure bugmail: http://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.