<html>
<head>
<base href="https://bugs.freedesktop.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Priority</th>
<td>medium
</td>
</tr>
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW --- - Unable to read cross-reference streams with 8-byte offsets"
href="https://bugs.freedesktop.org/show_bug.cgi?id=56318">56318</a>
</td>
</tr>
<tr>
<th>Assignee</th>
<td>poppler-bugs@lists.freedesktop.org
</td>
</tr>
<tr>
<th>Summary</th>
<td>Unable to read cross-reference streams with 8-byte offsets
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Classification</th>
<td>Unclassified
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Reporter</th>
<td>vhennebert@gmail.com
</td>
</tr>
<tr>
<th>Hardware</th>
<td>Other
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Version</th>
<td>unspecified
</td>
</tr>
<tr>
<th>Component</th>
<td>general
</td>
</tr>
<tr>
<th>Product</th>
<td>poppler
</td>
</tr></table>
<p>
<div>
<pre>Created <span class=""><a href="attachment.cgi?id=68945" name="attach_68945" title="Sample PDF document illustrating the problem">attachment 68945</a> <a href="attachment.cgi?id=68945&action=edit" title="Sample PDF document illustrating the problem">[details]</a></span>
Sample PDF document illustrating the problem
Section 3.4.7 of the PDF 1.5 Reference doesn't specify any limit on the size of
entries in a cross-reference stream. So the 'W' entry in a cross-reference
stream dictionary should be allowed to have a value of e.g. [1 8 2].
When trying to display the attached document, evince throws the following
error:
Error: PDF file is damaged - attempting to reconstruct xref table...
Error: Couldn't find trailer dictionary
Error: Couldn't read xref table
Ghostscript is able, however, to convert the document to PostScript (or back to
PDF, for that matter), and Adobe Reader displays it fine.
There are the following lines of code, starting from line 654 in
poppler/XRef.cc from Poppler 0.20.5 (the latest stable version downloaded from
the Poppler website):
if (w[i] < 0 || w[i] > 4) {
goto err1;
}
The w[i] > 4 seems unwarranted and there should be no upper limit (or, at
least, a limit of 8).</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>