From 237ae01b8a3b07c0e82398b0bfdb14cb73d50fa0 Mon Sep 17 00:00:00 2001 From: Sebastian Rasmussen Date: Sat, 4 Aug 2018 17:00:07 +0800 Subject: Bug 699626: Avoid trying to populate OCG ui struct without entries. Thanks to oss-fuzz for reporting. --- source/pdf/pdf-layer.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'source') diff --git a/source/pdf/pdf-layer.c b/source/pdf/pdf-layer.c index 189b823b..11f11660 100644 --- a/source/pdf/pdf-layer.c +++ b/source/pdf/pdf-layer.c @@ -183,6 +183,9 @@ load_ui(fz_context *ctx, pdf_ocg_descriptor *desc, pdf_obj *ocprops, pdf_obj *oc locked = pdf_dict_get(ctx, occg, PDF_NAME(Locked)); desc->num_ui_entries = count; + if (desc->num_ui_entries == 0) + return; + desc->ui = Memento_label(fz_calloc(ctx, count, sizeof(pdf_ocg_ui)), "pdf_ocg_ui"); fz_try(ctx) { -- cgit v1.2.3