diff options
| author | Robin Watts <robin.watts@artifex.com> | 2017-11-07 19:21:58 +0000 |
|---|---|---|
| committer | Robin Watts <robin.watts@artifex.com> | 2017-11-08 09:36:23 +0000 |
| commit | 520cc26d18c9ee245b56e9e91f9d4fcae02be5f0 (patch) | |
| tree | cbc92b8a9c99bf20360b39c1a30fd17218523275 /source/fitz/output-tga.c | |
| parent | d18bc728e46c5a5708f14d27c2b6c44e1d0c3232 (diff) | |
| download | mupdf-520cc26d18c9ee245b56e9e91f9d4fcae02be5f0.tar.xz | |
Bug 689699: Avoid buffer overrun.
When cleaning a pdf file, various lists (of pdf_xref_len length) are
defined early on.
If we trigger a repair during the clean, this can cause pdf_xref_len
to increase causing an overrun.
Fix this by watching for changes in the length, and checking accesses
to the list for validity.
This also appears to fix bugs 698700-698703.
Diffstat (limited to 'source/fitz/output-tga.c')
0 files changed, 0 insertions, 0 deletions