diff options
author | Sebastian Rasmussen <sebras@gmail.com> | 2018-01-30 02:05:57 +0100 |
---|---|---|
committer | Tor Andersson <tor.andersson@artifex.com> | 2018-01-31 11:56:59 +0100 |
commit | 5e411a99604ff6be5db9e273ee84737204113299 (patch) | |
tree | 8c836b8515b562739f1c6e27c6186819a70681b6 /source/pdf/pdf-parse.c | |
parent | a71e7c85a9f2313cde20d4479cd727a5f5518ed2 (diff) | |
download | mupdf-5e411a99604ff6be5db9e273ee84737204113299.tar.xz |
Bug 698916: Indirect object numbers must be in range.
Diffstat (limited to 'source/pdf/pdf-parse.c')
-rw-r--r-- | source/pdf/pdf-parse.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/source/pdf/pdf-parse.c b/source/pdf/pdf-parse.c index 7904ebd7..b4783ae8 100644 --- a/source/pdf/pdf-parse.c +++ b/source/pdf/pdf-parse.c @@ -623,6 +623,8 @@ pdf_parse_ind_obj(fz_context *ctx, pdf_document *doc, fz_throw(ctx, FZ_ERROR_SYNTAX, "expected object number"); } num = buf->i; + if (num < 0 || num > PDF_MAX_OBJECT_NUMBER) + fz_throw(ctx, FZ_ERROR_SYNTAX, "object number out of range"); tok = pdf_lex(ctx, file, buf); if (tok != PDF_TOK_INT) |