diff options
| author | Sebastian Rasmussen <sebras@gmail.com> | 2012-07-06 01:45:29 +0200 |
|---|---|---|
| committer | Robin Watts <robin.watts@artifex.com> | 2012-07-06 11:39:43 +0100 |
| commit | 39cbb7b1dff63a9eea61355e7885d3078b638789 (patch) | |
| tree | cf7c60390ad5eda3fc056bde78d43eed1429e08b /pdf/pdf_page.c | |
| parent | 333d3acec81fbe057945eeb6b57e51791f51e7c5 (diff) | |
| download | mupdf-39cbb7b1dff63a9eea61355e7885d3078b638789.tar.xz | |
Improve bounds checking in page tree.
Diffstat (limited to 'pdf/pdf_page.c')
| -rw-r--r-- | pdf/pdf_page.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/pdf/pdf_page.c b/pdf/pdf_page.c index 4adae3fd..28be312d 100644 --- a/pdf/pdf_page.c +++ b/pdf/pdf_page.c @@ -161,7 +161,7 @@ pdf_load_page_tree(pdf_document *xref) if (!pdf_is_dict(pages)) fz_throw(ctx, "missing page tree"); - if (!pdf_is_int(count)) + if (!pdf_is_int(count) || pdf_to_int(count) < 0) fz_throw(ctx, "missing page count"); xref->page_cap = pdf_to_int(count); |