[Poppler-bugs] [Bug 54090] Problems sent by Mateusz Jurczyk and Gynvael Coldwind

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=54090

--- Comment #16 from William Bader <williambader at hotmail.com> 2012-09-03 23:38:32 UTC ---
Created attachment 66582
  --> https://bugs.freedesktop.org/attachment.cgi?id=66582
Patch for 782.pdf.SIGSEGV.68.1144

Check for EOF in JPXStream::getImageParams() when skipping over unknown box
types in the header.  An invalid header in this pdf has an item with a length
of 3255930980, and the valgrind run wouldn't complete in a reasonable time.

Initialize img.ySize in JPXStream::readBoxes().  If the header turned out to be
invalid, JPXStream::reset() set curY to an uninitialized value, which caused
valgrind to complain on a test at the top of JPXStream::fillReadBuf().

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.