diff --git a/SOURCES/poppler-0.26.5-check-GfxSeparationColorSpace-existance.patch b/SOURCES/poppler-0.26.5-check-GfxSeparationColorSpace-existance.patch new file mode 100644 index 0000000..bf8e27e --- /dev/null +++ b/SOURCES/poppler-0.26.5-check-GfxSeparationColorSpace-existance.patch @@ -0,0 +1,38 @@ +From 9e9df4b20d17478996780008bc9802a857d173fc Mon Sep 17 00:00:00 2001 +From: Albert Astals Cid +Date: Thu, 8 Jan 2015 17:01:52 +0100 +Subject: Fix crash on broken document + +Bug #85281 + +diff --git a/poppler/GfxState.cc b/poppler/GfxState.cc +index 359c0d6..b439942 100644 +--- a/poppler/GfxState.cc ++++ b/poppler/GfxState.cc +@@ -16,7 +16,7 @@ + // Copyright (C) 2005 Kristian Høgsberg + // Copyright (C) 2006, 2007 Jeff Muizelaar + // Copyright (C) 2006, 2010 Carlos Garcia Campos +-// Copyright (C) 2006-2014 Albert Astals Cid ++// Copyright (C) 2006-2015 Albert Astals Cid + // Copyright (C) 2009, 2012 Koji Otani + // Copyright (C) 2009, 2011-2013 Thomas Freitag + // Copyright (C) 2009 Christian Persch +@@ -3048,8 +3048,12 @@ GfxColorSpace *GfxDeviceNColorSpace::copy() { + int *mappingA = NULL; + + GooList *sepsCSA = new GooList(sepsCS->getLength()); +- for (i = 0; i < sepsCS->getLength(); i++) +- sepsCSA->append(((GfxSeparationColorSpace *) sepsCS->get(i))->copy()); ++ for (i = 0; i < sepsCS->getLength(); i++) { ++ GfxSeparationColorSpace *scs = (GfxSeparationColorSpace *) sepsCS->get(i); ++ if (scs != NULL) { ++ sepsCSA->append(scs->copy()); ++ } ++ } + if (mapping != NULL) { + mappingA = (int *)gmalloc(sizeof(int) * nComps); + for (i = 0; i < nComps; i++) +-- +cgit v0.10.2 + diff --git a/SOURCES/poppler-0.26.5-check-array-length.patch b/SOURCES/poppler-0.26.5-check-array-length.patch new file mode 100644 index 0000000..99b8cb5 --- /dev/null +++ b/SOURCES/poppler-0.26.5-check-array-length.patch @@ -0,0 +1,25 @@ +From b3425dd3261679958cd56c0f71995c15d2124433 Mon Sep 17 00:00:00 2001 +From: Albert Astals Cid +Date: Tue, 22 Dec 2015 22:50:33 +0100 +Subject: Do not crash on invalid files + +Bug #93476 + +diff --git a/poppler/Function.cc b/poppler/Function.cc +index 67283df..ee5afc1 100644 +--- a/poppler/Function.cc ++++ b/poppler/Function.cc +@@ -577,6 +577,10 @@ ExponentialFunction::ExponentialFunction(Object *funcObj, Dict *dict) { + goto err2; + } + n = obj1.arrayGetLength(); ++ if (unlikely(n > funcMaxOutputs)) { ++ error(errSyntaxError, -1, "Function's C0 array is wrong length"); ++ n = funcMaxOutputs; ++ } + for (i = 0; i < n; ++i) { + obj1.arrayGet(i, &obj2); + if (!obj2.isNum()) { +-- +cgit v0.10.2 + diff --git a/SOURCES/poppler-0.26.5-check-for-int-overflow.patch b/SOURCES/poppler-0.26.5-check-for-int-overflow.patch new file mode 100644 index 0000000..1feba19 --- /dev/null +++ b/SOURCES/poppler-0.26.5-check-for-int-overflow.patch @@ -0,0 +1,33 @@ +From c114a90063d755639d2b0dbf816690a66b54bee0 Mon Sep 17 00:00:00 2001 +From: Albert Astals Cid +Date: Sun, 8 Feb 2015 00:24:11 +0100 +Subject: Fix crash in fuzzed file from Bug #84988 + + +diff --git a/poppler/TextOutputDev.cc b/poppler/TextOutputDev.cc +index c9db1e7..150d444 100644 +--- a/poppler/TextOutputDev.cc ++++ b/poppler/TextOutputDev.cc +@@ -20,7 +20,7 @@ + // Copyright (C) 2006 Jeff Muizelaar + // Copyright (C) 2007, 2008, 2012 Adrian Johnson + // Copyright (C) 2008 Koji Otani +-// Copyright (C) 2008, 2010-2012, 2014 Albert Astals Cid ++// Copyright (C) 2008, 2010-2012, 2014, 2015 Albert Astals Cid + // Copyright (C) 2008 Pino Toscano + // Copyright (C) 2008, 2010 Hib Eris + // Copyright (C) 2009 Ross Moore +@@ -622,6 +622,10 @@ void TextPool::addWord(TextWord *word) { + TextWord *w0, *w1; + + // expand the array if needed ++ if (unlikely((word->base / textPoolStep) > INT_MAX)) { ++ error(errSyntaxWarning, -1, "word->base / textPoolStep > INT_MAX"); ++ return; ++ } + wordBaseIdx = (int)(word->base / textPoolStep); + if (minBaseIdx > maxBaseIdx) { + minBaseIdx = wordBaseIdx - 128; +-- +cgit v0.10.2 + diff --git a/SOURCES/poppler-0.26.5-check-groupColorSpaceStack-existance.patch b/SOURCES/poppler-0.26.5-check-groupColorSpaceStack-existance.patch new file mode 100644 index 0000000..05cab1e --- /dev/null +++ b/SOURCES/poppler-0.26.5-check-groupColorSpaceStack-existance.patch @@ -0,0 +1,26 @@ +From 88eb9b4f57b488f0d7d79a8e115123484f4240c8 Mon Sep 17 00:00:00 2001 +From: Adrian Johnson +Date: Sun, 19 Oct 2014 21:36:39 +1030 +Subject: [PATCH] cairo: fix crash when no group color space + +Bug 85137 +--- + poppler/CairoOutputDev.cc | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/poppler/CairoOutputDev.cc b/poppler/CairoOutputDev.cc +index 3babb63..03130ac 100644 +--- a/poppler/CairoOutputDev.cc ++++ b/poppler/CairoOutputDev.cc +@@ -1624,7 +1624,7 @@ void CairoOutputDev::setSoftMask(GfxState * state, double * bbox, GBool alpha, + cairo_t *maskCtx = cairo_create(source); + + //XXX: hopefully this uses the correct color space */ +- if (!alpha) { ++ if (!alpha && groupColorSpaceStack->cs) { + GfxRGB backdropColorRGB; + groupColorSpaceStack->cs->getRGB(backdropColor, &backdropColorRGB); + /* paint the backdrop */ +-- +2.1.1 + diff --git a/SOURCES/poppler-0.26.5-do-not-assert-broken-document.patch b/SOURCES/poppler-0.26.5-do-not-assert-broken-document.patch new file mode 100644 index 0000000..1eff82e --- /dev/null +++ b/SOURCES/poppler-0.26.5-do-not-assert-broken-document.patch @@ -0,0 +1,36 @@ +From c909964bff671d5ff0d8eee5f613ded4562f8afd Mon Sep 17 00:00:00 2001 +From: Albert Astals Cid +Date: Sat, 7 Mar 2015 14:54:43 +0100 +Subject: Do not assert on broken document + +Bug #89422 + +diff --git a/poppler/SecurityHandler.cc b/poppler/SecurityHandler.cc +index d6f5599..44bd8b8 100644 +--- a/poppler/SecurityHandler.cc ++++ b/poppler/SecurityHandler.cc +@@ -288,12 +288,16 @@ StandardSecurityHandler::StandardSecurityHandler(PDFDoc *docA, + ok = gTrue; + } else if (encVersion == 5 && encRevision == 5) { + fileID = new GooString(); // unused for V=R=5 +- ownerEnc = ownerEncObj.getString()->copy(); +- userEnc = userEncObj.getString()->copy(); +- if (fileKeyLength > 32 || fileKeyLength < 0) { +- fileKeyLength = 32; ++ if (ownerEncObj.isString() && userEncObj.isString()) { ++ ownerEnc = ownerEncObj.getString()->copy(); ++ userEnc = userEncObj.getString()->copy(); ++ if (fileKeyLength > 32 || fileKeyLength < 0) { ++ fileKeyLength = 32; ++ } ++ ok = gTrue; ++ } else { ++ error(errSyntaxError, -1, "Weird encryption owner/user info"); + } +- ok = gTrue; + } else if (!(encVersion == -1 && encRevision == -1)) { + error(errUnimplemented, -1, + "Unsupported version/revision ({0:d}/{1:d}) of Standard security handler", +-- +cgit v0.10.2 + diff --git a/SOURCES/poppler-0.26.5-find-correct-glyph.patch b/SOURCES/poppler-0.26.5-find-correct-glyph.patch new file mode 100644 index 0000000..450c6bb --- /dev/null +++ b/SOURCES/poppler-0.26.5-find-correct-glyph.patch @@ -0,0 +1,28 @@ +From 18016a2b647fa41d59a9926c59bc86ca859bba18 Mon Sep 17 00:00:00 2001 +From: Marek Kasik +Date: Fri, 23 Oct 2015 10:15:47 +0200 +Subject: [PATCH] forms: Find correct glyph or return 0 + +Function CharCodeToUnicode::mapToCharCode() could return +wrong character code for given unicode character because +of wrongly placed continue statement. +--- + poppler/CharCodeToUnicode.cc | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/poppler/CharCodeToUnicode.cc b/poppler/CharCodeToUnicode.cc +index 5576a4a..91f6ff2 100644 +--- a/poppler/CharCodeToUnicode.cc ++++ b/poppler/CharCodeToUnicode.cc +@@ -656,7 +656,7 @@ int CharCodeToUnicode::mapToCharCode(Unicode* u, CharCode *c, int usize) { + //compare the string char by char + for (j=0; j +Date: Sat, 18 Apr 2015 12:44:47 -0500 +Subject: [PATCH] glib: Fix segfault when creating PopplerAction + +Screen annotations and form fields currently pass a NULL pointer to +_poppler_action_new. Pass the PopplerDocument instead. + +Bug #90093 +--- + glib/poppler-annot.cc | 4 ++-- + glib/poppler-form-field.cc | 2 +- + glib/poppler-page.cc | 2 +- + glib/poppler-private.h | 2 +- + 4 files changed, 5 insertions(+), 5 deletions(-) + +diff --git a/glib/poppler-annot.cc b/glib/poppler-annot.cc +index 15d48c5..312aa31 100644 +--- a/glib/poppler-annot.cc ++++ b/glib/poppler-annot.cc +@@ -559,7 +559,7 @@ poppler_annot_screen_class_init (PopplerAnnotScreenClass *klass) + } + + PopplerAnnot * +-_poppler_annot_screen_new (Annot *annot) ++_poppler_annot_screen_new (PopplerDocument *doc, Annot *annot) + { + PopplerAnnot *poppler_annot; + AnnotScreen *annot_screen; +@@ -569,7 +569,7 @@ _poppler_annot_screen_new (Annot *annot) + annot_screen = static_cast(poppler_annot->annot); + action = annot_screen->getAction(); + if (action) +- POPPLER_ANNOT_SCREEN (poppler_annot)->action = _poppler_action_new (NULL, action, NULL); ++ POPPLER_ANNOT_SCREEN (poppler_annot)->action = _poppler_action_new (doc, action, NULL); + + return poppler_annot; + } +diff --git a/glib/poppler-form-field.cc b/glib/poppler-form-field.cc +index 5687799..df184dd 100644 +--- a/glib/poppler-form-field.cc ++++ b/glib/poppler-form-field.cc +@@ -188,7 +188,7 @@ poppler_form_field_get_action (PopplerFormField *field) + if (!action) + return NULL; + +- field->action = _poppler_action_new (NULL, action, NULL); ++ field->action = _poppler_action_new (field->document, action, NULL); + + return field->action; + } +diff --git a/glib/poppler-page.cc b/glib/poppler-page.cc +index db2387a..1025393 100644 +--- a/glib/poppler-page.cc ++++ b/glib/poppler-page.cc +@@ -1399,7 +1399,7 @@ poppler_page_get_annot_mapping (PopplerPage *page) + mapping->annot = _poppler_annot_movie_new (annot); + break; + case Annot::typeScreen: +- mapping->annot = _poppler_annot_screen_new (annot); ++ mapping->annot = _poppler_annot_screen_new (page->document, annot); + break; + case Annot::typeLine: + mapping->annot = _poppler_annot_line_new (annot); +diff --git a/glib/poppler-private.h b/glib/poppler-private.h +index 874cfdb..9abdd7c 100644 +--- a/glib/poppler-private.h ++++ b/glib/poppler-private.h +@@ -130,7 +130,7 @@ PopplerAnnot *_poppler_annot_free_text_new (Annot *annot); + PopplerAnnot *_poppler_annot_text_markup_new (Annot *annot); + PopplerAnnot *_poppler_annot_file_attachment_new (Annot *annot); + PopplerAnnot *_poppler_annot_movie_new (Annot *annot); +-PopplerAnnot *_poppler_annot_screen_new (Annot *annot); ++PopplerAnnot *_poppler_annot_screen_new (PopplerDocument *doc, Annot *annot); + PopplerAnnot *_poppler_annot_line_new (Annot *annot); + PopplerAnnot *_poppler_annot_circle_new (Annot *annot); + PopplerAnnot *_poppler_annot_square_new (Annot *annot); +-- +2.1.4 + diff --git a/SOURCES/poppler-0.26.5-fix-splash.patch b/SOURCES/poppler-0.26.5-fix-splash.patch new file mode 100644 index 0000000..1888888 --- /dev/null +++ b/SOURCES/poppler-0.26.5-fix-splash.patch @@ -0,0 +1,81 @@ +From 92e41685dcef538a7fc669ca357ce9f448a8078e Mon Sep 17 00:00:00 2001 +From: Albert Astals Cid +Date: Sat, 7 Feb 2015 21:54:39 +0100 +Subject: Fix crash in malformed file from bug #85275 + + +diff --git a/poppler/SplashOutputDev.cc b/poppler/SplashOutputDev.cc +index 97af5c4..6640ab5 100644 +--- a/poppler/SplashOutputDev.cc ++++ b/poppler/SplashOutputDev.cc +@@ -4048,8 +4048,8 @@ void SplashOutputDev::setSoftMask(GfxState *state, double *bbox, + p = softMask->getDataPtr() + ty * softMask->getRowSize() + tx; + int xMax = tBitmap->getWidth(); + int yMax = tBitmap->getHeight(); +- if (xMax + tx > bitmap->getWidth()) xMax = bitmap->getWidth() - tx; +- if (yMax + ty > bitmap->getHeight()) yMax = bitmap->getHeight() - ty; ++ if (xMax > bitmap->getWidth() - tx) xMax = bitmap->getWidth() - tx; ++ if (yMax > bitmap->getHeight() - ty) yMax = bitmap->getHeight() - ty; + for (y = 0; y < yMax; ++y) { + for (x = 0; x < xMax; ++x) { + if (alpha) { +diff --git a/splash/Splash.cc b/splash/Splash.cc +index fde272a..142516f 100644 +--- a/splash/Splash.cc ++++ b/splash/Splash.cc +@@ -11,7 +11,7 @@ + // All changes made under the Poppler project to this file are licensed + // under GPL version 2 or later + // +-// Copyright (C) 2005-2014 Albert Astals Cid ++// Copyright (C) 2005-2015 Albert Astals Cid + // Copyright (C) 2005 Marco Pesenti Gritti + // Copyright (C) 2010-2014 Thomas Freitag + // Copyright (C) 2010 Christian Feuersänger +@@ -5214,6 +5214,10 @@ SplashError Splash::composite(SplashBitmap *src, int xSrc, int ySrc, + return splashErrModeMismatch; + } + ++ if (unlikely(!bitmap->data)) { ++ return splashErrZeroImage; ++ } ++ + if(src->getSeparationList()->getLength() > bitmap->getSeparationList()->getLength()) { + for (x = bitmap->getSeparationList()->getLength(); x < src->getSeparationList()->getLength(); x++) + bitmap->getSeparationList()->append(((GfxSeparationColorSpace *)src->getSeparationList()->get(x))->copy()); +@@ -5783,6 +5787,10 @@ SplashError Splash::blitTransparent(SplashBitmap *src, int xSrc, int ySrc, + return splashErrModeMismatch; + } + ++ if (unlikely(!bitmap->data)) { ++ return splashErrZeroImage; ++ } ++ + switch (bitmap->mode) { + case splashModeMono1: + for (y = 0; y < h; ++y) { +diff --git a/splash/SplashBitmap.cc b/splash/SplashBitmap.cc +index ac344f1..e886683 100644 +--- a/splash/SplashBitmap.cc ++++ b/splash/SplashBitmap.cc +@@ -11,7 +11,7 @@ + // All changes made under the Poppler project to this file are licensed + // under GPL version 2 or later + // +-// Copyright (C) 2006, 2009, 2010, 2012 Albert Astals Cid ++// Copyright (C) 2006, 2009, 2010, 2012, 2015 Albert Astals Cid + // Copyright (C) 2007 Ilmari Heikkinen + // Copyright (C) 2009 Shen Liang + // Copyright (C) 2009 Stefan Thomas +@@ -275,7 +275,7 @@ SplashError SplashBitmap::writeAlphaPGMFile(char *fileName) { + void SplashBitmap::getPixel(int x, int y, SplashColorPtr pixel) { + SplashColorPtr p; + +- if (y < 0 || y >= height || x < 0 || x >= width) { ++ if (y < 0 || y >= height || x < 0 || x >= width || !data) { + return; + } + switch (mode) { +-- +cgit v0.10.2 + diff --git a/SOURCES/poppler-0.26.5-move-array-reallocation.patch b/SOURCES/poppler-0.26.5-move-array-reallocation.patch new file mode 100644 index 0000000..7771e4a --- /dev/null +++ b/SOURCES/poppler-0.26.5-move-array-reallocation.patch @@ -0,0 +1,44 @@ +From e2a8d2c149988a96fec0dc0ec38001091cd9061e Mon Sep 17 00:00:00 2001 +From: Jason Crain +Date: Fri, 19 Dec 2014 01:56:45 -0600 +Subject: [PATCH] Move array reallocation from visitLine to startLine + +Fixes potential memory corruption from writing after end of lines +array. + +https://bugs.freedesktop.org/show_bug.cgi?id=84555 +--- + poppler/TextOutputDev.cc | 10 +++++----- + 1 file changed, 5 insertions(+), 5 deletions(-) + +diff --git a/poppler/TextOutputDev.cc b/poppler/TextOutputDev.cc +index 4b7ff40..9ed955e 100644 +--- a/poppler/TextOutputDev.cc ++++ b/poppler/TextOutputDev.cc +@@ -4072,6 +4072,11 @@ void TextSelectionDumper::startLine() + + void TextSelectionDumper::finishLine() + { ++ if (nLines == linesSize) { ++ linesSize *= 2; ++ lines = (GooList **)grealloc(lines, linesSize * sizeof(GooList *)); ++ } ++ + if (words && words->getLength() > 0) + lines[nLines++] = words; + else if (words) +@@ -4088,11 +4093,6 @@ void TextSelectionDumper::visitLine (TextLine *line, + { + TextLineFrag frag; + +- if (nLines == linesSize) { +- linesSize *= 2; +- lines = (GooList **)grealloc(lines, linesSize * sizeof(GooList *)); +- } +- + frag.init(line, edge_begin, edge_end - edge_begin); + + if (tableId >= 0 && frag.line->blk->tableId < 0) { +-- +2.1.3 + diff --git a/SOURCES/poppler-0.26.5-show-some-non-ASCII-characters.patch b/SOURCES/poppler-0.26.5-show-some-non-ASCII-characters.patch new file mode 100644 index 0000000..9d2b07a --- /dev/null +++ b/SOURCES/poppler-0.26.5-show-some-non-ASCII-characters.patch @@ -0,0 +1,28 @@ +From 22c8eb7e746827c694693895fc709a4ba7fdb957 Mon Sep 17 00:00:00 2001 +From: Marek Kasik +Date: Thu, 22 Oct 2015 16:15:23 +0200 +Subject: [PATCH] forms: Fix showing of some non-ASCII characters + +The &uChar is an array with just 1 member not 2. +This fixes mapping of some Unicode characters to +character codes. +--- + poppler/Annot.cc | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/poppler/Annot.cc b/poppler/Annot.cc +index f3f479c..89bbc89 100644 +--- a/poppler/Annot.cc ++++ b/poppler/Annot.cc +@@ -4125,7 +4125,7 @@ void Annot::layoutText(GooString *text, GooString *outBuf, int *i, + // This assumes an identity CMap. + outBuf->append((uChar >> 8) & 0xff); + outBuf->append(uChar & 0xff); +- } else if (ccToUnicode->mapToCharCode(&uChar, &c, 2)) { ++ } else if (ccToUnicode->mapToCharCode(&uChar, &c, 1)) { + ccToUnicode->decRefCnt(); + if (font->isCIDFont()) { + // TODO: This assumes an identity CMap. It should be extended to +-- +2.4.3 + diff --git a/SPECS/poppler.spec b/SPECS/poppler.spec index 84eb21e..68d3541 100644 --- a/SPECS/poppler.spec +++ b/SPECS/poppler.spec @@ -1,7 +1,7 @@ Summary: PDF rendering library Name: poppler Version: 0.26.5 -Release: 5%{?dist} +Release: 16%{?dist} License: (GPLv2 or GPLv3) and GPLv2+ and LGPLv2+ and MIT Group: Development/Libraries URL: http://poppler.freedesktop.org/ @@ -28,6 +28,34 @@ Patch7: poppler-0.26.5-soname-bump.patch # https://bugzilla.redhat.com/show_bug.cgi?id=1241488 Patch8: poppler-0.26.5-pfb-headers.patch +# https://bugzilla.redhat.com/show_bug.cgi?id=1299503 +Patch9: poppler-0.26.5-fix-creating-poppleraction.patch + +# https://bugzilla.redhat.com/show_bug.cgi?id=1299500 +Patch10: poppler-0.26.5-do-not-assert-broken-document.patch + +# https://bugzilla.redhat.com/show_bug.cgi?id=1299496 +Patch11: poppler-0.26.5-check-for-int-overflow.patch + +# https://bugzilla.redhat.com/show_bug.cgi?id=1299490 +Patch12: poppler-0.26.5-check-GfxSeparationColorSpace-existance.patch + +# https://bugzilla.redhat.com/show_bug.cgi?id=1299481 +Patch13: poppler-0.26.5-move-array-reallocation.patch + +# https://bugzilla.redhat.com/show_bug.cgi?id=1299479 +Patch14: poppler-0.26.5-check-groupColorSpaceStack-existance.patch + +# https://bugzilla.redhat.com/show_bug.cgi?id=1298616 +Patch15: poppler-0.26.5-show-some-non-ASCII-characters.patch +Patch16: poppler-0.26.5-find-correct-glyph.patch + +# https://bugzilla.redhat.com/show_bug.cgi?id=1299506 +Patch17: poppler-0.26.5-check-array-length.patch + +# https://bugzilla.redhat.com/show_bug.cgi?id=1299492 +Patch18: poppler-0.26.5-fix-splash.patch + Requires: poppler-data >= 0.4.0 BuildRequires: automake libtool BuildRequires: gettext-devel @@ -152,6 +180,16 @@ Requires: %{name}%{?_isa} = %{version}-%{release} %patch6 -p1 -b .rotated-word-selection %patch7 -p1 -b .soname-bump %patch8 -p1 -b .pfb-headers +%patch9 -p1 -b .fix-creating-poppleraction +%patch10 -p1 -b .do-not-assert-broken-document +%patch11 -p1 -b .check-for-int-overflow +%patch12 -p1 -b .check-GfxSeparationColorSpace-existance +%patch13 -p1 -b .move-array-reallocation +%patch14 -p1 -b .check-groupColorSpaceStack-existance +%patch15 -p1 -b .show-some-non-ASCII-characters +%patch16 -p1 -b .find-correct-glyph +%patch17 -p1 -b .check-array-length +%patch18 -p1 -b .fix-splash # hammer to nuke rpaths, recheck on new releases autoreconf -i -f @@ -273,6 +311,50 @@ test "$(pkg-config --modversion poppler-splash)" = "%{version}" %changelog +* Wed Mar 9 2016 Martin Hatina - 0.26.5-16 +- Fix crash in Splash +- Resolves: #1299492 + +* Wed Mar 9 2016 Martin Hatina - 0.26.5-15 +- Check array length +- Resolves: #1299506 + +* Tue Mar 8 2016 Martin Hatina - 0.26.5-14 +- Show correct glyph or none instead of 'fi' +- Resolves: #1298616 + +* Tue Mar 8 2016 Martin Hatina - 0.26.5-13 +- Check for groupColorSpace existance +- Resolves: #1299479 + +* Tue Mar 8 2016 Martin Hatina - 0.26.5-12 +- Move array reallocation from visitLine to startLine +- Resolves: #1299481 + +* Mon Mar 7 2016 Martin Hatina - 0.26.5-11 +- Repair patch +- Resolves: #1299490 + +* Mon Mar 7 2016 Martin Hatina - 0.26.5-10 +- Check for GfxSeparationColorSpace existance +- Resolves: #1299490 + +* Mon Mar 7 2016 Martin Hatina - 0.26.5-9 +- Check for int overflow +- Resolves: #1299496 + +* Wed Mar 2 2016 Martin Hatina - 0.26.5-8 +- Do not assert on broken document +- Resolves: #1299500 + +* Tue Mar 1 2016 Martin Hatina - 0.26.5-7 +- Add missing patch +- Resolves: #1299503 + +* Tue Mar 1 2016 Martin Hatina - 0.26.5-6 +- Fix segfault when creating PopplerAction +- Resolves: #1299503 + * Thu Jul 9 2015 Marek Kasik - 0.26.5-5 - Remove PFB headers from embedded Type1 fonts - before embedding them into a PostScript file.