poppler/XRef.cc | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
New commits:
commit 19d3993f3f40b5113141d5a55acea307c174f1d3
Author: Albert Astals Cid <[email protected]>
Date: Sun May 27 09:10:05 2018 +0200
XRef::fetch: Don't try to fetch objects with negative offset
fixes oss-fuzz/8433
diff --git a/poppler/XRef.cc b/poppler/XRef.cc
index 6afb51a0..95e1a1d4 100644
--- a/poppler/XRef.cc
+++ b/poppler/XRef.cc
@@ -1141,7 +1141,7 @@ Object XRef::fetch(int num, int gen, int recursion) {
case xrefEntryUncompressed:
{
- if (e->gen != gen) {
+ if (e->gen != gen || e->offset < 0) {
goto err;
}
parser = new Parser(this,
_______________________________________________
poppler mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/poppler
