|
 |
db2a8b |
From 7f87dc10b6adccd6d1b977a28b064add254aa2da Mon Sep 17 00:00:00 2001
|
|
|
db2a8b |
From: Adam Reichold <adam.reichold@t-online.de>
|
|
|
db2a8b |
Date: Thu, 27 Dec 2018 11:54:53 +0100
|
|
|
db2a8b |
Subject: [PATCH] Do not try to construct invalid rich media annotation assets.
|
|
|
db2a8b |
Closes #703
|
|
|
db2a8b |
|
|
|
db2a8b |
---
|
|
|
db2a8b |
poppler/Annot.cc | 24 +++++++++++++-----------
|
|
|
db2a8b |
1 file changed, 13 insertions(+), 11 deletions(-)
|
|
|
db2a8b |
|
|
|
db2a8b |
diff --git a/poppler/Annot.cc b/poppler/Annot.cc
|
|
|
db2a8b |
index 2e4770ab..1750dc70 100644
|
|
|
db2a8b |
--- a/poppler/Annot.cc
|
|
|
db2a8b |
+++ b/poppler/Annot.cc
|
|
|
db2a8b |
@@ -6418,20 +6418,22 @@ AnnotRichMedia::Content::Content(Dict *dict) {
|
|
|
db2a8b |
if (obj1.isDict()) {
|
|
|
db2a8b |
Object obj2 = obj1.getDict()->lookup("Names");
|
|
|
db2a8b |
if (obj2.isArray()) {
|
|
|
db2a8b |
- nAssets = obj2.arrayGetLength() / 2;
|
|
|
db2a8b |
+ const int length = obj2.arrayGetLength() / 2;
|
|
|
db2a8b |
|
|
|
db2a8b |
- assets = (Asset **)gmallocn(nAssets, sizeof(Asset *));
|
|
|
db2a8b |
+ assets = (Asset **)gmallocn(length, sizeof(Asset *));
|
|
|
db2a8b |
+ for (int i = 0; i < length; ++i) {
|
|
|
db2a8b |
+ Object objKey = obj2.arrayGet(2 * i);
|
|
|
db2a8b |
+ Object objVal = obj2.arrayGet(2 * i + 1);
|
|
|
db2a8b |
|
|
|
db2a8b |
- int counter = 0;
|
|
|
db2a8b |
- for (int i = 0; i < nAssets; ++i) {
|
|
|
db2a8b |
- assets[counter] = new AnnotRichMedia::Asset;
|
|
|
db2a8b |
-
|
|
|
db2a8b |
- Object objKey = obj2.arrayGet(i * 2);
|
|
|
db2a8b |
- assets[counter]->fileSpec = obj2.arrayGet(i * 2 + 1);
|
|
|
db2a8b |
-
|
|
|
db2a8b |
- assets[counter]->name = new GooString( objKey.getString() );
|
|
|
db2a8b |
- ++counter;
|
|
|
db2a8b |
+ if (!objKey.isString() || objVal.isNull()) {
|
|
|
db2a8b |
+ error(errSyntaxError, -1, "Bad Annot Asset");
|
|
|
db2a8b |
+ continue;
|
|
|
db2a8b |
+ }
|
|
|
db2a8b |
|
|
|
db2a8b |
+ assets[nAssets] = new AnnotRichMedia::Asset;
|
|
|
db2a8b |
+ assets[nAssets]->name = new GooString( objKey.getString() );
|
|
|
db2a8b |
+ assets[nAssets]->fileSpec = std::move(objVal);
|
|
|
db2a8b |
+ ++nAssets;
|
|
|
db2a8b |
}
|
|
|
db2a8b |
}
|
|
|
db2a8b |
}
|
|
|
db2a8b |
--
|
|
|
db2a8b |
2.20.1
|
|
|
db2a8b |
|