[poppler] A few vulnerabilitiess in libpoppler
Albert Astals Cid
aacid at kde.org
Mon Nov 29 13:35:13 PST 2010
A Dimecres, 24 de novembre de 2010, Robert Święcki va escriure:
> On Wed, Nov 24, 2010 at 2:41 PM, Robert Święcki <robert at swiecki.net> wrote:
> >> No, you need to get openjpeg as a separate library, i'm sure that when
> >> you do the configure step it warns you that you should be using it.
> >>
> >> Anyway do all the files in that tar crash for you? Because i tried
> >> SIGSEGV.PC.(nil).CODE.1.ADDR.(nil).INSTR.[NOT_MMAPED].pdf
> >> and works perfectly for me.
>
> Anyway, I prepared new version of testcases tested with the newest
> poppler and libopenjpeg
>
> http://alt.swiecki.net/j/poppler_2010.11.24.tbz2
Fixed all crashes that happened here and found that were poppler's fault (lots
of them were crashes inside libopenjpeg)
Albert
More information about the poppler
mailing list