Bug 690592

Summary: mupdf generates a malloc(3) abord with this pdf
Product: MuPDF Reporter: James Cloos <cloos>
Component: fitzAssignee: Tor Andersson <tor.andersson>
Status: NOTIFIED FIXED    
Severity: normal    
Priority: P4    
Version: unspecified   
Hardware: PC   
OS: Linux   
Customer: Word Size: ---
Attachments: pdf which crashes mupdf

Description James Cloos 2009-07-02 11:45:05 UTC 
When viewing the attached pdf with mupdf, glibc-2.9 (claims to) detect(s) a
memory corruption error during a call to malloc(3) and aborts.

Interestingly, running with MALLOC_CHECK_=1 or MALLOC_CHECK_=2 avoids the abort.

The malloc abort occurs in a call to fz_newname() with the string "PANTONE 7545
U".  I presume that is in 62 0 R.

It looks like something else, earlier, must set up the abort.

The only notable issue with the pdf is that it uses named spot colours and may
be, rather than a PDF generated by Illustrator, in Illustrator’s PDF-based save
format.
Comment 1 James Cloos 2009-07-02 11:50:01 UTC 
Created attachment 5178 [details]
pdf which crashes mupdf
Comment 2 Tor Andersson 2009-07-02 14:24:15 UTC 
Fixed by one of the recent refcounting patches.
Comment 3 James Cloos 2010-05-07 08:24:54 UTC 
Closing resolved bugs which I reported.