[Poppler-bugs] [Bug 18030] New: Crash when converting to abiword

[bugzilla-daemon at freedesktop.org]

http://bugs.freedesktop.org/show_bug.cgi?id=18030

           Summary: Crash when converting to abiword
           Product: poppler
           Version: unspecified
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: general
        AssignedTo: poppler-bugs at lists.freedesktop.org
        ReportedBy: tsdgeos at terra.es


Created an attachment (id=19602)
 --> (http://bugs.freedesktop.org/attachment.cgi?id=19602)
The file that produces a crash

Using pdftoabw crashes on this file.

Valgrind says:

==1066== Invalid read of size 4
==1066==    at 0x4FD8986: ABWOutputDev::cleanUpNode(_xmlNode*, bool)
(ABWOutputDev.cc:713)
==1066==    by 0x4FD8705: ABWOutputDev::cleanUpNode(_xmlNode*, bool)
(ABWOutputDev.cc:679)
==1066==    by 0x4FDA8CD: ABWOutputDev::endPage() (ABWOutputDev.cc:86)
==1066==    by 0x4F1CE7F: Gfx::~Gfx() (Gfx.cc:577)
==1066==    by 0x4F67FA3: Page::displaySlice(OutputDev*, double, double, int,
int, int, int, int, int, int, int, Catalog*, int (*)(void*), void*, int
(*)(Annot*, void*), void*) (Page.cc:463)
==1066==    by 0x4F68063: Page::display(OutputDev*, double, double, int, int,
int, int, Catalog*, int (*)(void*), void*, int (*)(Annot*, void*), void*)
(Page.cc:367)
==1066==    by 0x4F6D1A5: PDFDoc::displayPage(OutputDev*, int, double, double,
int, int, int, int, int (*)(void*), void*, int (*)(Annot*, void*), void*)
(PDFDoc.cc:391)
==1066==    by 0x4F6D23E: PDFDoc::displayPages(OutputDev*, int, int, double,
double, int, int, int, int, int (*)(void*), void*, int (*)(Annot*, void*),
void*) (PDFDoc.cc:406)
==1066==    by 0x402121: main (pdftoabw.cc:144)
==1066==  Address 0x747b1a8 is 0 bytes after a block of size 64 alloc'd
==1066==    at 0x4C23487: operator new[](unsigned long)
(vg_replace_malloc.c:274)
==1066==    by 0x4FD857B: ABWOutputDev::cleanUpNode(_xmlNode*, bool)
(ABWOutputDev.cc:625)
==1066==    by 0x4FD8705: ABWOutputDev::cleanUpNode(_xmlNode*, bool)
(ABWOutputDev.cc:679)
==1066==    by 0x4FDA8CD: ABWOutputDev::endPage() (ABWOutputDev.cc:86)
==1066==    by 0x4F1CE7F: Gfx::~Gfx() (Gfx.cc:577)
==1066==    by 0x4F67FA3: Page::displaySlice(OutputDev*, double, double, int,
int, int, int, int, int, int, int, Catalog*, int (*)(void*), void*, int
(*)(Annot*, void*), void*) (Page.cc:463)
==1066==    by 0x4F68063: Page::display(OutputDev*, double, double, int, int,
int, int, Catalog*, int (*)(void*), void*, int (*)(Annot*, void*), void*)
(Page.cc:367)
==1066==    by 0x4F6D1A5: PDFDoc::displayPage(OutputDev*, int, double, double,
int, int, int, int, int (*)(void*), void*, int (*)(Annot*, void*), void*)
(PDFDoc.cc:391)
==1066==    by 0x4F6D23E: PDFDoc::displayPages(OutputDev*, int, int, double,
double, int, int, int, int, int (*)(void*), void*, int (*)(Annot*, void*),
void*) (PDFDoc.cc:406)
==1066==    by 0x402121: main (pdftoabw.cc:144)


-- 
Configure bugmail: http://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.