Bug 697019 - mutool/mupdf: use-after-free in pdf_dict_get (pdf-object.c)
Summary: mutool/mupdf: use-after-free in pdf_dict_get (pdf-object.c)
Status: RESOLVED DUPLICATE of bug 697015
Alias: None
Product: MuPDF
Classification: Unclassified
Component: fuzzing (show other bugs)
Version: 1.9
Hardware: PC Linux
: P4 normal
Assignee: muPDF bugs
QA Contact: Bug traffic
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-08-05 07:45 UTC by Agostino Sarubbo
Modified: 2016-09-22 08:46 UTC (History)
1 user (show)

See Also:
Customer:
Word Size: ---


Attachments
reproducer (3.88 KB, application/pdf)
2016-08-05 07:45 UTC, Agostino Sarubbo
Details
stacktrace (4.63 KB, text/plain)
2016-08-05 07:45 UTC, Agostino Sarubbo
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo 2016-08-05 07:45:01 UTC
Created attachment 12817 [details]
reproducer

Hello,

there is an use-after-free in pdf_dict_get triggered from a crafted file.

I'm attaching:
1) The reproducer;
2) The stacktrace provided by Address Sanitizer;
Comment 1 Agostino Sarubbo 2016-08-05 07:45:33 UTC
Created attachment 12818 [details]
stacktrace
Comment 2 Agostino Sarubbo 2016-09-21 07:01:30 UTC
The command to reproduce the issue is:
# mutool info $REPRODUCER
Comment 3 Sebastian Rasmussen 2016-09-22 08:46:14 UTC
This issue has already been fixed by commit 1e03c06456d997435019fb3526fa2d4be7dbc6ec.

*** This bug has been marked as a duplicate of bug 697015 ***