diff options
| author | Jay Berkenbilt <ejb@ql.org> | 2017-07-25 16:13:30 +0200 |
|---|---|---|
| committer | Jay Berkenbilt <ejb@ql.org> | 2017-07-26 12:24:07 +0200 |
| commit | 603f222365252f1a1e20303b3dbe52466be3053b (patch) | |
| tree | 7b3244c9282af1aa37f9c70905ab9b8a70f7ba94 /ChangeLog | |
| parent | bd6c8456190af148c9f40806f3a6f561a3c38a53 (diff) | |
| download | qpdf-603f222365252f1a1e20303b3dbe52466be3053b.tar.zst | |
Fix infinite loop while reporting an error (fixes #101)
This is CVE-2017-9210.
The description string for an error message included unparsing an
object, which is too complex of a thing to try to do while throwing an
exception. There was only one example of this in the entire codebase,
so it is not a pervasive problem. Fixing this eliminated one class of
infinite loop errors.
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 5 |
1 files changed, 5 insertions, 0 deletions
@@ -1,3 +1,8 @@ +2017-07-26 Jay Berkenbilt <ejb@ql.org> + + * CVE-2017-9210: Fix infinite loop caused by attempting to unparse + an object for inclusion in the text of an exception. + 2015-11-10 Jay Berkenbilt <ejb@ql.org> * 6.0.0: release |