diff options
author | Sebastian Rasmussen <sebras@gmail.com> | 2018-01-23 03:04:33 +0100 |
---|---|---|
committer | Sebastian Rasmussen <sebras@gmail.com> | 2018-01-24 15:29:23 +0100 |
commit | 71ceebcf56e682504da22c4035b39a2d451e8ffd (patch) | |
tree | c8c6f87e54234f5955bb88b5c580bfd0dc2cf995 /source | |
parent | 7f82c01523505052615492f8e220f4348ba46995 (diff) | |
download | mupdf-71ceebcf56e682504da22c4035b39a2d451e8ffd.tar.xz |
Bug 698888: Keep one-to-many state when splitting nodes in cmap splay trees.
Thanks to oss-fuzz for reporting this.
Diffstat (limited to 'source')
-rw-r--r-- | source/pdf/pdf-cmap.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/source/pdf/pdf-cmap.c b/source/pdf/pdf-cmap.c index ade72c44..bedc1304 100644 --- a/source/pdf/pdf-cmap.c +++ b/source/pdf/pdf-cmap.c @@ -520,7 +520,7 @@ add_range(fz_context *ctx, pdf_cmap *cmap, unsigned int low, unsigned int high, /* case 3, reduces to case 5 */ int new_high = tree[current].high; tree[current].high = low-1; - add_range(ctx, cmap, high+1, new_high, tree[current].out + high + 1 - tree[current].low, 0, many); + add_range(ctx, cmap, high+1, new_high, tree[current].out + high + 1 - tree[current].low, 0, tree[current].many); } /* Now look for where to move to next (left for case 0, right for case 5) */ if (tree[current].low > high) { |