[Poppler-bugs] [Bug 103552] Out of bounds memory read when loading zero-bytes PDF

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=103552

--- Comment #2 from simon-freedesktop at exyr.org ---
Is “don’t do that” really the best answer to an out-of-bounds memory access bug
in a library routinely used with untrusted input from the Internet?

The reason I stumbled upon this bug is that I’d like to use Poppler to test a
library that generates PDF files. I started writing a test harness before I
wrote any library code, so the first input I tried with my Rust bindings to
Poppler was the empty byte vector.

Steps to reproduce: compile with gcc $(pkg-config --cflags --libs poppler-glib)

    #include "poppler.h"

    void main() {
        poppler_document_new_from_data((char*) 1, 0, NULL, NULL);
    }

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/poppler-bugs/attachments/20171110/28d82cbf/attachment.html>