[poppler] pdfsig: Segfault in ~SignatureHandler / double-free

Michael Joost sonet at michael-joost.de
Mon Jul 25 09:12:21 UTC 2016


After more debugging I've found the root cause of the problem:
The dada pattern is set by nspr-4.12 in FreeArenaList() /
ClearArenaList() if DEBUG is defined. This is, however, incompatible
with nss, which requires NULL to handle the double-destroy properly.

The DEBUG is always defined unless --disable-debug is explicitly
specified for nspr compile (which is not mentioned in the BLFS
instructions, and is also a strange default behavior by itself).

After compiling nspr-4.12 without debug the segfault in pdfsig no longer
occurs.

Thanks for your effort anyway, Albert.

br,
Michael


On 24.07.2016 23:46, Albert Astals Cid wrote:
> Can not reproduce, can you please open a bug in bugs.freedesktop.org and 
> attach one of the files you're using to have this crash?
> 
> Cheers,
>   Albert



More information about the poppler mailing list