[poppler] A few vulnerabilitiess in libpoppler

Albert Astals Cid aacid at kde.org
Mon Nov 29 13:35:13 PST 2010


A Dimecres, 24 de novembre de 2010, Robert Święcki va escriure:
> On Wed, Nov 24, 2010 at 2:41 PM, Robert Święcki <robert at swiecki.net> wrote:
> >> No, you need to get openjpeg as a separate library, i'm sure that when
> >> you do the configure step it warns you that you should be using it.
> >> 
> >> Anyway do all the files in that tar crash for you? Because i tried
> >> SIGSEGV.PC.(nil).CODE.1.ADDR.(nil).INSTR.[NOT_MMAPED].pdf
> >> and works perfectly for me.
> 
> Anyway, I prepared new version of testcases tested with the newest
> poppler and libopenjpeg
> 
> http://alt.swiecki.net/j/poppler_2010.11.24.tbz2

Fixed all crashes that happened here and found that were poppler's fault (lots 
of them were crashes inside libopenjpeg)

Albert


More information about the poppler mailing list