[poppler] poppler/Decrypt.cc

Albert Astals Cid aacid at kemper.freedesktop.org
Fri May 25 20:58:42 UTC 2018


 poppler/Decrypt.cc |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit 14adecb9693345b7e3baa6dee05f5c88dde7952c
Author: Albert Astals Cid <aacid at kde.org>
Date:   Fri May 25 22:57:29 2018 +0200

    Decrypt::md5: initialize x
    
    When msgLen is small enough x would had initialized values for some
    parts of the md5 calculation
    
    fixes oss-fuzz/8492

diff --git a/poppler/Decrypt.cc b/poppler/Decrypt.cc
index 83d18824..2e599bcd 100644
--- a/poppler/Decrypt.cc
+++ b/poppler/Decrypt.cc
@@ -1150,7 +1150,7 @@ static inline Gulong md5Round4(Gulong a, Gulong b, Gulong c, Gulong d,
 }
 
 void md5(Guchar *msg, int msgLen, Guchar *digest) {
-  Gulong x[16];
+  Gulong x[16] = {};
   Gulong a, b, c, d, aa, bb, cc, dd;
   int n64;
   int i, j, k;


More information about the poppler mailing list