summaryrefslogtreecommitdiff
path: root/source/pdf/pdf-interpret.c
diff options
context:
space:
mode:
authorRobin Watts <robin.watts@artifex.com>2013-11-28 00:37:10 +0000
committerRobin Watts <robin.watts@artifex.com>2013-11-28 00:41:08 +0000
commit9c910781c2dd9b7b49fedefc9f140d0c3b1a3896 (patch)
tree2264740e62dc09045751109eeead791c3bd2538f /source/pdf/pdf-interpret.c
parent16158407233ab95669dcf54725a628315522c905 (diff)
downloadmupdf-9c910781c2dd9b7b49fedefc9f140d0c3b1a3896.tar.xz
Bug 694127: Valgrind fix for pdf_decode_cmap
A poorly formed string can cause us to overrun the end of the buffer. Now we check the end of the string at each stage to avoid this.
Diffstat (limited to 'source/pdf/pdf-interpret.c')
-rw-r--r--source/pdf/pdf-interpret.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/source/pdf/pdf-interpret.c b/source/pdf/pdf-interpret.c
index bfdf77ab..71dcbd4e 100644
--- a/source/pdf/pdf-interpret.c
+++ b/source/pdf/pdf-interpret.c
@@ -946,7 +946,7 @@ pdf_show_string(pdf_csi *csi, unsigned char *buf, int len)
while (buf < end)
{
- int w = pdf_decode_cmap(fontdesc->encoding, buf, &cpt);
+ int w = pdf_decode_cmap(fontdesc->encoding, buf, end, &cpt);
buf += w;
cid = pdf_lookup_cmap(fontdesc->encoding, cpt);