diff options
author | Jay Berkenbilt <ejb@ql.org> | 2015-02-22 00:22:32 +0100 |
---|---|---|
committer | Jay Berkenbilt <ejb@ql.org> | 2015-02-22 01:47:11 +0100 |
commit | a11549a566ceed28bc9f6ba100b0d3f6ae59a1f4 (patch) | |
tree | 4868bd8264af045ea8796f3a7cd74ccc5f462bb9 /ChangeLog | |
parent | 28a9df5119af12d6d97edf4fa97f88ce23865096 (diff) | |
download | qpdf-a11549a566ceed28bc9f6ba100b0d3f6ae59a1f4.tar.zst |
Detect loops in /Pages structure
Pushing inherited objects to pages and getting all pages were both
prone to stack overflow infinite loops if there were loops in the
Pages dictionary. There is a general weakness in the code in that any
part of the code that traverses the Pages structure would be prone to
this and would have to implement its own loop detection. A more robust
fix may provide some general method for handling the Pages structure,
but it's probably not worth doing.
Note: addition of *Internal2 private functions was done rather than
changing signatures of existing methods to avoid breaking
compatibility.
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 4 |
1 files changed, 4 insertions, 0 deletions
@@ -1,5 +1,9 @@ 2015-02-21 Jay Berkenbilt <ejb@ql.org> + * Detect loops in Pages structure. Thanks to Gynvael Coldwind and + Mateusz Jurczyk of the Google Security Team for providing a sample + file with this problem. + * Prevent buffer overrun when converting a password to an encryption key. Thanks to Gynvael Coldwind and Mateusz Jurczyk of the Google Security Team for providing a sample file with this |