[Poppler-bugs] [Bug 28842] New: poppler-glib: NULL deref crash caused by OCG with no name

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=28842

           Summary: poppler-glib: NULL deref crash caused by OCG with no
                    name
           Product: poppler
           Version: unspecified
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: glib frontend
        AssignedTo: poppler-bugs at lists.freedesktop.org
        ReportedBy: thoger at redhat.com


Attached test case from Sauli Pahlman triggers NULL deref crash in
GooString::hasUnicodeMarker, which is called from glib frontend on NULL
pointer.  This causes evince to crash when trying to view this file.

Immediate crash cause is in _poppler_layer_new(), which calls
_poppler_goo_string_to_utf8() with NULL returned by layer->oc->getName().

Expected OptionalContentGroup::OptionalContentGroup's error message "Expected
the name of the OCG, but wasn't able to find it, or it isn't a String" precedes
the crash.

Command line utilities or okular using qt4 frontend do not crash on the file,
so assigning this to glib frontend component.  Feel free to re-assign if this
should better be addressed via some core poppler change.

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.