[Poppler-bugs] [Bug 76439] SEGV in StreamPredictor::getChar

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=76439

--- Comment #4 from Antti Husa <a.husa at hushmail.com> ---
Yes, I'm able to reproduce it with master branch from git, although it seems to
go through FlateStream::getChar() this time.

Here's ASAN report:
==22821== ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc
0x7fdfa8c583a3 sp 0x7fff9dc1e790 bp 0x7fff9dc1e7a0 T0)
AddressSanitizer can not provide additional info.
    #0 0x7fdfa8c583a2 in StreamPredictor::getChar()
/var/tmp/portage/app-text/poppler-9999/work/poppler-9999/poppler/Stream.cc:615
    #1 0x7fdfa8d9e655 in FlateStream::getChar()
/var/tmp/portage/app-text/poppler-9999/work/poppler-9999/poppler/FlateStream.cc:58
    #2 0x7fdfa8c8916d in XRef::readXRefStreamSection(Stream*, int*, int, int)
/var/tmp/portage/app-text/poppler-9999/work/poppler-9999/poppler/XRef.cc:844
    #3 0x7fdfa8c88ccd in XRef::readXRefStream(Stream*, long long*)
/var/tmp/portage/app-text/poppler-9999/work/poppler-9999/poppler/XRef.cc:785
    #4 0x7fdfa8c87759 in XRef::readXRef(long long*, std::vector<long long,
std::allocator<long long> >*, std::vector<int, std::allocator<int> >*)
/var/tmp/portage/app-text/poppler-9999/work/poppler-9999/poppler/XRef.cc:560
    #5 0x7fdfa8c85571 in XRef::XRef(BaseStream*, long long, long long, bool*,
bool)
/var/tmp/portage/app-text/poppler-9999/work/poppler-9999/poppler/XRef.cc:342
    #6 0x7fdfa8c412a8 in PDFDoc::setup(GooString*, GooString*)
/var/tmp/portage/app-text/poppler-9999/work/poppler-9999/poppler/PDFDoc.cc:260
    #7 0x7fdfa8c40d2c in PDFDoc::PDFDoc(GooString*, GooString*, GooString*,
void*)
/var/tmp/portage/app-text/poppler-9999/work/poppler-9999/poppler/PDFDoc.cc:165
    #8 0x7fdfa92b6b57 in poppler_document_new_from_file
/var/tmp/portage/app-text/poppler-9999/work/poppler-9999/glib/poppler-document.cc:202
    #9 0x7fdfa9543853 in pdf_document_open
/var/tmp/portage/app-text/zathura-pdf-poppler-0.2.3/work/zathura-pdf-poppler-0.2.3/pdf.c:214
    #10 0x429e14 in zathura_document_open
/var/tmp/portage/app-text/zathura-0.2.1/work/zathura-0.2.1/document.c:130
    #11 0x415057 in document_open
/var/tmp/portage/app-text/zathura-0.2.1/work/zathura-0.2.1/zathura.c:482
    #12 0x415f43 in document_info_open
/var/tmp/portage/app-text/zathura-0.2.1/work/zathura-0.2.1/zathura.c:465
    #13 0x7fdfb232ca76 (/usr/lib64/libgdk-x11-2.0.so.0+0x20a76)
    #14 0x7fdfb174fa95 (/usr/lib64/libglib-2.0.so.0+0x4aa95)
    #15 0x7fdfb174fde7 (/usr/lib64/libglib-2.0.so.0+0x4ade7)
    #16 0x7fdfb17501e9 (/usr/lib64/libglib-2.0.so.0+0x4b1e9)
    #17 0x7fdfb26f9dd6 (/usr/lib64/libgtk-x11-2.0.so.0+0x139dd6)
    #18 0x40ddea in main
/var/tmp/portage/app-text/zathura-0.2.1/work/zathura-0.2.1/main.c:145
    #19 0x7fdfb0a5ebf4 in __libc_start_main
/var/tmp/portage/sys-libs/glibc-2.17/work/glibc-2.17/csu/libc-start.c:258
    #20 0x40e544 in _start (/usr/bin/zathura+0x40e544)
SUMMARY: AddressSanitizer: SEGV
/var/tmp/portage/app-text/poppler-9999/work/poppler-9999/poppler/Stream.cc:615
StreamPredictor::getChar()
==22821== ABORTING

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/poppler-bugs/attachments/20140326/ab53f3f4/attachment-0001.html>