diff options
| author | Sebastian Rasmussen <sebras@gmail.com> | 2018-08-04 17:00:07 +0800 |
|---|---|---|
| committer | Sebastian Rasmussen <sebras@gmail.com> | 2018-08-10 01:15:40 +0800 |
| commit | 237ae01b8a3b07c0e82398b0bfdb14cb73d50fa0 (patch) | |
| tree | d00950158e52e5dd3cb62080457d51b1b2594485 | |
| parent | ce3e98c07e29dab2743e792e478395ed30d27dc1 (diff) | |
| download | mupdf-237ae01b8a3b07c0e82398b0bfdb14cb73d50fa0.tar.xz | |
Bug 699626: Avoid trying to populate OCG ui struct without entries.
Thanks to oss-fuzz for reporting.
| -rw-r--r-- | source/pdf/pdf-layer.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/source/pdf/pdf-layer.c b/source/pdf/pdf-layer.c index 189b823b..11f11660 100644 --- a/source/pdf/pdf-layer.c +++ b/source/pdf/pdf-layer.c @@ -183,6 +183,9 @@ load_ui(fz_context *ctx, pdf_ocg_descriptor *desc, pdf_obj *ocprops, pdf_obj *oc locked = pdf_dict_get(ctx, occg, PDF_NAME(Locked)); desc->num_ui_entries = count; + if (desc->num_ui_entries == 0) + return; + desc->ui = Memento_label(fz_calloc(ctx, count, sizeof(pdf_ocg_ui)), "pdf_ocg_ui"); fz_try(ctx) { |