[poppler] poppler/XRef.cc

[Albert Astals Cid]

 poppler/XRef.cc |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

New commits:
commit 19d3993f3f40b5113141d5a55acea307c174f1d3
Author: Albert Astals Cid <aacid at kde.org>
Date:   Sun May 27 09:10:05 2018 +0200

    XRef::fetch: Don't try to fetch objects with negative offset
    
    fixes oss-fuzz/8433

diff --git a/poppler/XRef.cc b/poppler/XRef.cc
index 6afb51a0..95e1a1d4 100644
--- a/poppler/XRef.cc
+++ b/poppler/XRef.cc
@@ -1141,7 +1141,7 @@ Object XRef::fetch(int num, int gen, int recursion) {
 
   case xrefEntryUncompressed:
   {
-    if (e->gen != gen) {
+    if (e->gen != gen || e->offset < 0) {
       goto err;
     }
     parser = new Parser(this,