A bug report (http://code.google.com/p/sumatrapdf/issues/detail?id=716) from sumatrapdf mentions a NULL-dereference. I checked this briefly and it seems to be a genuine issue, here is a probable call path: jbig2_decode_symbol_dict(...) jbig2_decode_text_region(..., (Jbig2WordStream *)NULL); if (params->SBHUFF) { jbig2_huffman_new(..., ws); // ws is NULL here result->this_word = ws->get_next_word (ws, 0); // ws is NULL and is dereferenced here... / Sebastian
Looks like you're right. Thanks for the report. Do you have a file which exercises this?
Fix in http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=7c309e8a33333da3c124732bb6b00b0701e85579
*** Bug 690895 has been marked as a duplicate of this bug. ***