<html>
<head>
<base href="https://bugs.freedesktop.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - Malformed input will cause a stack overflow and crash"
href="https://bugs.freedesktop.org/show_bug.cgi?id=91186#c1">Comment # 1</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - Malformed input will cause a stack overflow and crash"
href="https://bugs.freedesktop.org/show_bug.cgi?id=91186">bug 91186</a>
from <span class="vcard"><a class="email" href="mailto:jason@aquaticape.us" title="Jason Crain <jason@aquaticape.us>"> <span class="fn">Jason Crain</span></a>
</span></b>
<pre>Created <span class=""><a href="attachment.cgi?id=118106" name="attach_118106" title="Fix JBIG2Decode infinite loop and stack overflow">attachment 118106</a> <a href="attachment.cgi?id=118106&action=edit" title="Fix JBIG2Decode infinite loop and stack overflow">[details]</a></span> <a href='page.cgi?id=splinter.html&bug=91186&attachment=118106'>[review]</a>
Fix JBIG2Decode infinite loop and stack overflow
A PDF object with a JBIG2Decode filter can create a stack overflow or infinite
loop. This patch fixes the stack overflow by adding the 'recursion' argument
to the fetch call. And it fixes the infinite loop by removing the reference
lookup loop since chains of references aren't allowed by the spec. At least I
haven't seen any other reader that supports them.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>