3d5b8e
From 55db66c69fd56826b8523710046deab1a8d14ba2 Mon Sep 17 00:00:00 2001
3d5b8e
From: Albert Astals Cid <aacid@kde.org>
3d5b8e
Date: Wed, 21 Jun 2017 00:55:20 +0200
3d5b8e
Subject: [PATCH] Fix crash in malformed documents
3d5b8e
3d5b8e
---
3d5b8e
 poppler/JBIG2Stream.cc | 2 +-
3d5b8e
 1 file changed, 1 insertion(+), 1 deletion(-)
3d5b8e
3d5b8e
diff --git a/poppler/JBIG2Stream.cc b/poppler/JBIG2Stream.cc
3d5b8e
index 4853588..d89108c 100644
3d5b8e
--- a/poppler/JBIG2Stream.cc
3d5b8e
+++ b/poppler/JBIG2Stream.cc
3d5b8e
@@ -868,6 +868,8 @@
3d5b8e
   oneByte = x0 == ((x1 - 1) & ~7);
3d5b8e
 
3d5b8e
   for (yy = y0; yy < y1; ++yy) {
3d5b8e
+    if (unlikely((y + yy >= h) || (y + yy < 0)))
3d5b8e
+      continue;
3d5b8e
 
3d5b8e
     // one byte per line -- need to mask both left and right side
3d5b8e
     if (oneByte) {