aboutsummaryrefslogtreecommitdiffstats
path: root/ChangeLog
diff options
context:
space:
mode:
authorJay Berkenbilt <ejb@ql.org>2015-02-22 00:22:32 +0100
committerJay Berkenbilt <ejb@ql.org>2015-02-22 01:47:11 +0100
commita11549a566ceed28bc9f6ba100b0d3f6ae59a1f4 (patch)
tree4868bd8264af045ea8796f3a7cd74ccc5f462bb9 /ChangeLog
parent28a9df5119af12d6d97edf4fa97f88ce23865096 (diff)
downloadqpdf-a11549a566ceed28bc9f6ba100b0d3f6ae59a1f4.tar.zst
Detect loops in /Pages structure
Pushing inherited objects to pages and getting all pages were both prone to stack overflow infinite loops if there were loops in the Pages dictionary. There is a general weakness in the code in that any part of the code that traverses the Pages structure would be prone to this and would have to implement its own loop detection. A more robust fix may provide some general method for handling the Pages structure, but it's probably not worth doing. Note: addition of *Internal2 private functions was done rather than changing signatures of existing methods to avoid breaking compatibility.
Diffstat (limited to 'ChangeLog')
-rw-r--r--ChangeLog4
1 files changed, 4 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog
index 88def950..798addd4 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,9 @@
2015-02-21 Jay Berkenbilt <ejb@ql.org>
+ * Detect loops in Pages structure. Thanks to Gynvael Coldwind and
+ Mateusz Jurczyk of the Google Security Team for providing a sample
+ file with this problem.
+
* Prevent buffer overrun when converting a password to an
encryption key. Thanks to Gynvael Coldwind and Mateusz Jurczyk of
the Google Security Team for providing a sample file with this