Re: [Podofo-users] CVE-2017-5853 and CVE-2017-6844 testing (overflow fixed, but unhandled exception present)

2018-04-14 Thread Mark Rogers
It's actual unit tests (a new tests/unit/ParserTest.cpp file) and most of the tests are for PdfParser::ReadXRefSubsection (responsible for CVE-2015-8981, CVE-2017-5853, CVE-2017-5855, CVE-2017-6844, CVE-2018-5296 - 14% of the CVEs discovered in PoDoFo) I'll submit the new tests next week - my

Re: [Podofo-users] [PATCH] Compilation fix under ubuntu 16.04

2018-04-14 Thread Dominik Seichter via Podofo-users
Thanks! Committed as revision 1919. On Fri, Apr 13, 2018 at 11:41 PM, Francesco Pretto wrote: > Hello, > > I just tested compilation on ubuntu 16.04. It's not compiling with this > error: > > /home/ceztko/projects/current/PoDoFo/src/base/PdfObjectStreamParserObject. > cpp: >

Re: [Podofo-users] CVE-2017-5853 and CVE-2017-6844 testing (overflow fixed, but unhandled exception present)

2018-04-14 Thread Dominik Seichter via Podofo-users
Hi Mark, Thanks for your patch. Committed as revision 1921. I would also include the unit test into the source tree once you submit them. Worthcase would be to disable the execution with CPPUNIT in the Header file. Best regards, Dominik On Sat, Apr 14, 2018 at 9:29 AM, Mark Rogers