[Poppler-bugs] [Bug 28784] New: poppler: stream object /Length attribute parsing infinite loop and stack memory exhaustion

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=28784

           Summary: poppler: stream object /Length attribute parsing
                    infinite loop and stack memory exhaustion
           Product: poppler
           Version: unspecified
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: general
        AssignedTo: poppler-bugs at lists.freedesktop.org
        ReportedBy: thoger at redhat.com


Circular reference using in (stream) object's /Length attribute can cause
poppler's PDF parser to enter an infinite loop (deep recursion), leading to
program crash once all stack memory is exhausted.  This can happen when
object's /Length attribute refers to the same object, but the loop can also
contain additional intermediate objects.

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.