[poppler] poppler/Gfx.cc

[Albert Astals Cid]

 poppler/Gfx.cc |    8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

New commits:
commit bcb13ed5828e2a855efd5e38b2acd15ca37a9991
Author: Albert Astals Cid <aacid at kde.org>
Date:   Sat Oct 23 22:40:17 2010 +0100

    Check obj2 is a num before reading it

diff --git a/poppler/Gfx.cc b/poppler/Gfx.cc
index 12c0bd2..d11845c 100644
--- a/poppler/Gfx.cc
+++ b/poppler/Gfx.cc
@@ -1261,7 +1261,13 @@ void Gfx::doSoftMask(Object *str, GBool alpha,
   }
   for (i = 0; i < 4; ++i) {
     obj1.arrayGet(i, &obj2);
-    bbox[i] = obj2.getNum();
+    if (likely(obj2.isNum())) bbox[i] = obj2.getNum();
+    else {
+      obj2.free();
+      obj1.free();
+      error(getPos(), "Bad form bounding box (non number)");
+      return;
+    }
     obj2.free();
   }
   obj1.free();