This seems to be the problematic bit of code (at line 2095 in 
glib/poppler-document.cc):
    } else if (orderItem.isString ()) {
      last_item->label = _poppler_goo_string_to_utf8 (orderItem.getString ());
    }

An extremely naive fix for this (from someone who hasn't looked at the code 
much) would be to do:
    } else if (last_item != NULL && orderItem.isString ()) {
      last_item->label = _poppler_goo_string_to_utf8 (orderItem.getString ());
    }

That may fix the crash, but may not render the text correctly. This
appears to be just a crasher so am marking as non-security. Please re-
mark this as security if this is a mistake.

** This bug is no longer flagged as a security vulnerability

** Changed in: poppler (Ubuntu)
       Status: New => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/726224

Title:
  evince crashed with SIGSEGV in get_optional_content_items_sorted()

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to