> On Debian Bullseye this crashes xpdf with coredump:
> touch x.pdf; xpdf x.pdf
This is a Poppler bug: they've added some more sanity checks to
PDFDoc::setup, including one to catch empty files, but not all of them
set errCode correctly.
I've submitted a fix to Poppler upstream:
https://gitlab.
Package: xpdf
Version: 3.04-13
Severity: normal
Tag: security
On Debian Bullseye this crashes xpdf with coredump:
touch x.pdf; xpdf x.pdf
Funny, after a 2-byte Virtualbox (and now qemu) crash, this is
the shortest input for a DoS-bug I have seen so far :-)
For xpdf this bug itself is not reall
2 matches
Mail list logo