1 files changed, 4 insertions, 0 deletions
diff --git a/libqpdf/QPDF_json.cc b/libqpdf/QPDF_json.cc
index 502f2346..8326e6a5 100644
--- a/libqpdf/QPDF_json.cc
+++ b/libqpdf/QPDF_json.cc
@@ -441,6 +441,10 @@ QPDF::JSONReactor::containerEnd(JSON const& value)
 void
 QPDF::JSONReactor::replaceObject(QPDFObjectHandle&& replacement, JSON const& value)
 {
+    if (replacement.isIndirect()) {
+        error(replacement.getParsedOffset(), "the value of an object may not be an indirect object reference");
+        return;
+    }
     auto& tos = stack.back();
     auto og = tos.object.getObjGen();
     this->pdf.replaceObject(og, replacement);