summaryrefslogtreecommitdiff
path: root/source/pdf/pdf-cmap.c
diff options
context:
space:
mode:
authorSebastian Rasmussen <sebras@gmail.com>2018-01-23 03:04:33 +0100
committerSebastian Rasmussen <sebras@gmail.com>2018-01-24 15:29:23 +0100
commit71ceebcf56e682504da22c4035b39a2d451e8ffd (patch)
treec8c6f87e54234f5955bb88b5c580bfd0dc2cf995 /source/pdf/pdf-cmap.c
parent7f82c01523505052615492f8e220f4348ba46995 (diff)
downloadmupdf-71ceebcf56e682504da22c4035b39a2d451e8ffd.tar.xz
Bug 698888: Keep one-to-many state when splitting nodes in cmap splay trees.
Thanks to oss-fuzz for reporting this.
Diffstat (limited to 'source/pdf/pdf-cmap.c')
-rw-r--r--source/pdf/pdf-cmap.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/source/pdf/pdf-cmap.c b/source/pdf/pdf-cmap.c
index ade72c44..bedc1304 100644
--- a/source/pdf/pdf-cmap.c
+++ b/source/pdf/pdf-cmap.c
@@ -520,7 +520,7 @@ add_range(fz_context *ctx, pdf_cmap *cmap, unsigned int low, unsigned int high,
/* case 3, reduces to case 5 */
int new_high = tree[current].high;
tree[current].high = low-1;
- add_range(ctx, cmap, high+1, new_high, tree[current].out + high + 1 - tree[current].low, 0, many);
+ add_range(ctx, cmap, high+1, new_high, tree[current].out + high + 1 - tree[current].low, 0, tree[current].many);
}
/* Now look for where to move to next (left for case 0, right for case 5) */
if (tree[current].low > high) {