Package: mupdf-tools
Version: 1.9a+ds1-4

"mutool clean -l" crashes on this (AFAICT completely valid) PDF file:

  $ mutool clean -l test-duplicate-page-title.pdf
  error: cannot parse token in array
  error: cannot parse array
  error: cannot parse dict
  error: cannot parse dict
  warning: cannot load object (11 0 R) into cache
  error: cannot parse token in array
  error: cannot parse array
  error: cannot parse dict
  error: cannot parse dict
  warning: cannot load object (11 0 R) into cache
  error: cannot parse token in array
  error: cannot parse array
  error: cannot parse dict
  error: cannot parse dict
  error: cannot parse token in array
  error: cannot parse array
  error: cannot parse dict
  error: cannot parse dict
  warning: cannot load object (11 0 R) into cache
  Segmentation fault

Valgrind says it's a null pointer dereference:

  Invalid read of size 4
     at 0x18F307: make_page_offset_hints (pdf-write.c:2288)
     by 0x18F307: make_hint_stream (pdf-write.c:2495)
     by 0x19397F: pdf_save_document (pdf-write.c:2874)
     by 0x1ABAE3: pdf_clean_file (pdf-clean-file.c:354)
     by 0x12CB49: pdfclean_main (pdfclean.c:84)
     by 0x11C4F4: main (mutool.c:104)
   Address 0x8 is not stack'd, malloc'd or (recently) free'd


-- System Information:
Architecture: i386

Versions of packages mupdf-tools depends on:
ii  libc6            2.24-12
ii  libfreetype6     2.8-0.2
ii  libharfbuzz0b    1.4.2-1
ii  libjbig2dec0     0.13-4.1
ii  libjpeg62-turbo  1:1.5.1-2
ii  libopenjp2-7     2.1.2-1.1
ii  zlib1g           1:1.2.8.dfsg-5

--
Jakub Wilk

Attachment: test-duplicate-page-title.pdf.gz
Description: application/gzip

Reply via email to