Bug 697019 - mutool/mupdf: use-after-free in pdf_dict_get (pdf-object.c)
Summary: mutool/mupdf: use-after-free in pdf_dict_get (pdf-object.c)
Status: RESOLVED DUPLICATE of bug 697015
Alias: None
Product: MuPDF
Classification: Unclassified
Component: fuzzing (show other bugs)
Version: 1.9
Hardware: PC Linux
: P4 normal
Assignee: MuPDF bugs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-08-05 07:45 UTC by Agostino Sarubbo
Modified: 2016-09-22 08:46 UTC (History)
1 user (show)

See Also:
Customer:
Word Size: ---

Attachments
reproducer (3.88 KB, application/pdf)
2016-08-05 07:45 UTC, Agostino Sarubbo 		Details
stacktrace (4.63 KB, text/plain)
2016-08-05 07:45 UTC, Agostino Sarubbo 		Details
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo 2016-08-05 07:45:01 UTC 
Created attachment 12817 [details]
reproducer

Hello,

there is an use-after-free in pdf_dict_get triggered from a crafted file.

I'm attaching:
1) The reproducer;
2) The stacktrace provided by Address Sanitizer;
Comment 1 Agostino Sarubbo 2016-08-05 07:45:33 UTC 
Created attachment 12818 [details]
stacktrace
Comment 2 Agostino Sarubbo 2016-09-21 07:01:30 UTC 
The command to reproduce the issue is:
# mutool info $REPRODUCER
Comment 3 Sebastian Rasmussen 2016-09-22 08:46:14 UTC 
This issue has already been fixed by commit 1e03c06456d997435019fb3526fa2d4be7dbc6ec.

*** This bug has been marked as a duplicate of bug 697015 ***