[Poppler-bugs] [Bug 56318] New: Unable to read cross-reference streams with 8-byte offsets

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=56318

          Priority: medium
            Bug ID: 56318
          Assignee: poppler-bugs at lists.freedesktop.org
           Summary: Unable to read cross-reference streams with 8-byte
                    offsets
          Severity: normal
    Classification: Unclassified
                OS: All
          Reporter: vhennebert at gmail.com
          Hardware: Other
            Status: NEW
           Version: unspecified
         Component: general
           Product: poppler

Created attachment 68945
  --> https://bugs.freedesktop.org/attachment.cgi?id=68945&action=edit
Sample PDF document illustrating the problem

Section 3.4.7 of the PDF 1.5 Reference doesn't specify any limit on the size of
entries in a cross-reference stream. So the 'W' entry in a cross-reference
stream dictionary should be allowed to have a value of e.g. [1 8 2].

When trying to display the attached document, evince throws the following
error:
Error: PDF file is damaged - attempting to reconstruct xref table...
Error: Couldn't find trailer dictionary
Error: Couldn't read xref table

Ghostscript is able, however, to convert the document to PostScript (or back to
PDF, for that matter), and Adobe Reader displays it fine.

There are the following lines of code, starting from line 654 in 
poppler/XRef.cc from Poppler 0.20.5 (the latest stable version downloaded from
the Poppler website):
    if (w[i] < 0 || w[i] > 4) {
      goto err1;
    }
The w[i] > 4 seems unwarranted and there should be no upper limit (or, at
least, a limit of 8).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/poppler-bugs/attachments/20121023/42fb62f1/attachment.html>