[cairo] [PATCH cairo v2 5/8] pdf: Fix potential null ptr deref when creating smask groups (CID #1159559)

Bryce Harrington bryce at bryceharrington.org
Wed Jun 13 00:35:35 UTC 2018

Patch 37a22669 improved performance by using bounding box extents.
However, the code appears to be incorrect.  If extents is non-NULL it
copies its contents to group->extents, otherwise it sets group->extents
to sensible defaults, but then goes ahead and tries to copy the
undefined contents.  This second copy is unnecessary if extents is
non-NULL and will cause a crash if it is NULL.

Drop the extra copy, guessing it's just a typo.

Coverity ID: #1159559

Signed-off-by: Bryce Harrington <bryce at bryceharrington.org>
 src/cairo-pdf-surface.c | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/cairo-pdf-surface.c b/src/cairo-pdf-surface.c
index 7186fc0..ab67813 100644
--- a/src/cairo-pdf-surface.c
+++ b/src/cairo-pdf-surface.c
@@ -1291,7 +1291,6 @@ _cairo_pdf_surface_create_smask_group (cairo_pdf_surface_t	    *surface,
 	group->extents.width = surface->width;
 	group->extents.height = surface->height;
-    group->extents = *extents;
     return group;

More information about the cairo mailing list