|
 |
2418db |
From c114a90063d755639d2b0dbf816690a66b54bee0 Mon Sep 17 00:00:00 2001
|
|
|
2418db |
From: Albert Astals Cid <aacid@kde.org>
|
|
|
2418db |
Date: Sun, 8 Feb 2015 00:24:11 +0100
|
|
|
2418db |
Subject: Fix crash in fuzzed file from Bug #84988
|
|
|
2418db |
|
|
|
2418db |
|
|
|
2418db |
diff --git a/poppler/TextOutputDev.cc b/poppler/TextOutputDev.cc
|
|
|
2418db |
index c9db1e7..150d444 100644
|
|
|
2418db |
--- a/poppler/TextOutputDev.cc
|
|
|
2418db |
+++ b/poppler/TextOutputDev.cc
|
|
|
2418db |
@@ -20,7 +20,7 @@
|
|
|
2418db |
// Copyright (C) 2006 Jeff Muizelaar <jeff@infidigm.net>
|
|
|
2418db |
// Copyright (C) 2007, 2008, 2012 Adrian Johnson <ajohnson@redneon.com>
|
|
|
2418db |
// Copyright (C) 2008 Koji Otani <sho@bbr.jp>
|
|
|
2418db |
-// Copyright (C) 2008, 2010-2012, 2014 Albert Astals Cid <aacid@kde.org>
|
|
|
2418db |
+// Copyright (C) 2008, 2010-2012, 2014, 2015 Albert Astals Cid <aacid@kde.org>
|
|
|
2418db |
// Copyright (C) 2008 Pino Toscano <pino@kde.org>
|
|
|
2418db |
// Copyright (C) 2008, 2010 Hib Eris <hib@hiberis.nl>
|
|
|
2418db |
// Copyright (C) 2009 Ross Moore <ross@maths.mq.edu.au>
|
|
|
2418db |
@@ -622,6 +622,10 @@ void TextPool::addWord(TextWord *word) {
|
|
|
2418db |
TextWord *w0, *w1;
|
|
|
2418db |
|
|
|
2418db |
// expand the array if needed
|
|
|
2418db |
+ if (unlikely((word->base / textPoolStep) > INT_MAX)) {
|
|
|
2418db |
+ error(errSyntaxWarning, -1, "word->base / textPoolStep > INT_MAX");
|
|
|
2418db |
+ return;
|
|
|
2418db |
+ }
|
|
|
2418db |
wordBaseIdx = (int)(word->base / textPoolStep);
|
|
|
2418db |
if (minBaseIdx > maxBaseIdx) {
|
|
|
2418db |
minBaseIdx = wordBaseIdx - 128;
|
|
|
2418db |
--
|
|
|
2418db |
cgit v0.10.2
|
|
|
2418db |
|