<html>
<head>
<base href="https://bugs.freedesktop.org/">
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - poppler 0.62.0: stack overflow in FoFiType1C::getOp in fofi/FoFiType1C.cc:2556"
href="https://bugs.freedesktop.org/show_bug.cgi?id=104942">104942</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>poppler 0.62.0: stack overflow in FoFiType1C::getOp in fofi/FoFiType1C.cc:2556
</td>
</tr>
<tr>
<th>Product</th>
<td>poppler
</td>
</tr>
<tr>
<th>Version</th>
<td>unspecified
</td>
</tr>
<tr>
<th>Hardware</th>
<td>x86-64 (AMD64)
</td>
</tr>
<tr>
<th>OS</th>
<td>Linux (All)
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>medium
</td>
</tr>
<tr>
<th>Component</th>
<td>utils
</td>
</tr>
<tr>
<th>Assignee</th>
<td>poppler-bugs@lists.freedesktop.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>luanjunchao@163.com
</td>
</tr></table>
<p>
<div>
<pre>Created <span class=""><a href="attachment.cgi?id=137167" name="attach_137167" title="crash corpus">attachment 137167</a> <a href="attachment.cgi?id=137167&action=edit" title="crash corpus">[details]</a></span>
crash corpus
I compiled latest poppler source code and when I test pdftops with a speific
pdf corpus, it raised stack overflow.
Here is the detailed information:
root@9c9d96c10f13:/work# ./poppler_address/utils/pdftops crash_corpus 1
Syntax Error (112189): Illegal character ')'
Syntax Error (112195): Dictionary key must be a name object
Syntax Error (112203): Dictionary key must be a name object
Syntax Error: Unknown font type 'Op'
Syntax Error (112189): Illegal character ')'
Syntax Error (112195): Dictionary key must be a name object
Syntax Error (112203): Dictionary key must be a name object
Syntax Error (112189): Illegal character ')'
Syntax Error (112195): Dictionary key must be a name object
Syntax Error (112203): Dictionary key must be a name object
Syntax Error (112189): Illegal character ')'
Syntax Error (112195): Dictionary key must be a name object
Syntax Error (112203): Dictionary key must be a name object
Syntax Error (112189): Illegal character ')'
Syntax Error (112195): Dictionary key must be a name object
Syntax Error (112203): Dictionary key must be a name object
Syntax Error: Missing length fields in embedded font stream dictionary
ASAN:SIGSEGV
=================================================================
==100913==ERROR: AddressSanitizer: stack-overflow on address 0x7ffccfdd2f48 (pc
0x0000005f6f3e bp 0x7ffccfdd3080 sp 0x7ffccfdd2f30 T0)
#0 0x5f6f3d in FoFiType1C::getOp(int, bool, bool*)
/work/poppler_address/fofi/FoFiType1C.cc:2556
#1 0x5e3288 in FoFiType1C::cvtGlyph(int, int, GooString*, Type1CIndex*,
Type1CPrivateDict*, bool) /work/poppler_address/fofi/FoFiType1C.cc:1223
#2 0x5e5b98 in FoFiType1C::cvtGlyph(int, int, GooString*, Type1CIndex*,
Type1CPrivateDict*, bool) /work/poppler_address/fofi/FoFiType1C.cc:1365
#3 0x5e5b98 in FoFiType1C::cvtGlyph(int, int, GooString*, Type1CIndex*,
Type1CPrivateDict*, bool) /work/poppler_address/fofi/FoFiType1C.cc:1365
#4 0x5e5b98 in FoFiType1C::cvtGlyph(int, int, GooString*, Type1CIndex*,
Type1CPrivateDict*, bool) /work/poppler_address/fofi/FoFiType1C.cc:1365
......
#249 0x5e5b98 in FoFiType1C::cvtGlyph(int, int, GooString*, Type1CIndex*,
Type1CPrivateDict*, bool) /work/poppler_address/fofi/FoFiType1C.cc:1365
#250 0x5e5b98 in FoFiType1C::cvtGlyph(int, int, GooString*, Type1CIndex*,
Type1CPrivateDict*, bool) /work/poppler_address/fofi/FoFiType1C.cc:1365
#251 0x5e5b98 in FoFiType1C::cvtGlyph(int, int, GooString*, Type1CIndex*,
Type1CPrivateDict*, bool) /work/poppler_address/fofi/FoFiType1C.cc:1365
SUMMARY: AddressSanitizer: stack-overflow
/work/poppler_address/fofi/FoFiType1C.cc:2556 FoFiType1C::getOp(int, bool,
bool*)
==100913==ABORTING
The crash corpus is attached.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>