[Poppler-bugs] [Bug 35381] crashes in tilingPatternFill

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=35381

--- Comment #3 from M.Drochner at fz-juelich.de 2011-03-24 04:12:25 PDT ---
There is at least another file (the "AeqB.pdf" text about formal proofs
which is available at various places on the net) which makes
evince or epdfview crash for me from apparent heap corruption
in _render_type3_glyph().
This function and tilingPatternFill have in common that a sub-instance
of cairo is created, and a new "Gfx" object, to render some part
of the output. (_render_type3_glyph creates a new CairoOutputDev for
that purpose while the latter reuses the original one which looks
hackish but doesn't seem to cause the problems I'm seeing.)
So here might be some recursion problem or so, or a bug in cairo
triggered. I'm using 1.10.2 -- did you test with the same version?

best regards
Matthias



------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDirig Dr. Karl Eugen Huthmacher
Geschaeftsfuehrung: Prof. Dr. Achim Bachem (Vorsitzender),
Dr. Ulrich Krafft (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt,
Prof. Dr. Sebastian M. Schmidt
------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.