[poppler] poppler/JBIG2Stream.cc

GitLab Mirror gitlab-mirror at kemper.freedesktop.org
Wed Jan 6 23:18:39 UTC 2021


 poppler/JBIG2Stream.cc |    5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

New commits:
commit 04035f915627a7e470a5509bccffedefb845d786
Author: Albert Astals Cid <aacid at kde.org>
Date:   Thu Jan 7 00:09:26 2021 +0100

    JBIG2Stream: Protect against yet another potential overflow
    
    oss-fuzz/29335

diff --git a/poppler/JBIG2Stream.cc b/poppler/JBIG2Stream.cc
index 111fac02..6bda5f92 100644
--- a/poppler/JBIG2Stream.cc
+++ b/poppler/JBIG2Stream.cc
@@ -2221,7 +2221,10 @@ std::unique_ptr<JBIG2Bitmap> JBIG2Stream::readTextRegion(bool huff, bool refine,
     } else {
         arithDecoder->decodeInt(&t, iadtStats);
     }
-    t *= -(int)strips;
+
+    if (checkedMultiply(t, -(int)strips, &t)) {
+        return {};
+    }
 
     inst = 0;
     sFirst = 0;


More information about the poppler mailing list