poppler/Gfx.cc | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-)
New commits: commit bcb13ed5828e2a855efd5e38b2acd15ca37a9991 Author: Albert Astals Cid <[email protected]> Date: Sat Oct 23 22:40:17 2010 +0100 Check obj2 is a num before reading it diff --git a/poppler/Gfx.cc b/poppler/Gfx.cc index 12c0bd2..d11845c 100644 --- a/poppler/Gfx.cc +++ b/poppler/Gfx.cc @@ -1261,7 +1261,13 @@ void Gfx::doSoftMask(Object *str, GBool alpha, } for (i = 0; i < 4; ++i) { obj1.arrayGet(i, &obj2); - bbox[i] = obj2.getNum(); + if (likely(obj2.isNum())) bbox[i] = obj2.getNum(); + else { + obj2.free(); + obj1.free(); + error(getPos(), "Bad form bounding box (non number)"); + return; + } obj2.free(); } obj1.free(); _______________________________________________ poppler mailing list [email protected] http://lists.freedesktop.org/mailman/listinfo/poppler
