poppler/Linearization.cc | 2 ++
1 file changed, 2 insertions(+)
New commits:
commit 1e3b202760aad7737afe9a57d5f1acd66f6be2ee
Author: Even Rouault <[email protected]>
Date: Tue Nov 26 16:53:01 2019 +0100
Do not recognized as linearized documents that lack a valid Linearized dict
Documents such as the one at
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19098
(under embargo at the time of writing) have the structure of the Linearized
dict
but lack valid integer object numbers. Poppler still manages to make some
sense
of that, but not recognizing such corrupted files as linearized would help
the
consumer (GDAL) that does admitedly nasty things around Poppler...
diff --git a/poppler/Linearization.cc b/poppler/Linearization.cc
index 0fea7539..cce78d76 100644
--- a/poppler/Linearization.cc
+++ b/poppler/Linearization.cc
@@ -36,6 +36,8 @@ Linearization::Linearization (BaseStream *str)
if (!(obj5.isNum() && obj5.getNum() > 0)) {
linDict.setToNull();
}
+ } else {
+ linDict.setToNull();
}
delete parser;
}
_______________________________________________
poppler mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/poppler
