diff options
| author | Robin Watts <robin.watts@artifex.com> | 2014-01-09 15:54:48 +0000 |
|---|---|---|
| committer | Robin Watts <robin.watts@artifex.com> | 2014-01-09 17:03:51 +0000 |
| commit | bf20683f737a39ccb0e8c74735fdd6805025c987 (patch) | |
| tree | 201b76123a723631999db1b7ab8786406ac12e37 /thirdparty | |
| parent | 818db87cfa20034cf5215eb640110065acc2c92c (diff) | |
| download | mupdf-bf20683f737a39ccb0e8c74735fdd6805025c987.tar.xz | |
Bug 694878: Fix SEGV due to double free
When constructing a filter chain, we pass ownership of 'chain' inwards.
This means we need to be careful not to double close chain.
This fixes:
5df97f8539d31745f1c45cc9e1468825_asan_heap-oob_a59afe_1862_225.pdf
a736faf6f4a34b7ad8eff207ba52aa57_asan_heap-oob_a59dd9_5744_4860.pdf
Thanks to Mateusz Jurczyk and Gynvael Coldwind of the Google Security
Team for providing the fuzzing files.
Diffstat (limited to 'thirdparty')
0 files changed, 0 insertions, 0 deletions