While re-fuzzing evince, a null-pointer dereference was observed. Initially this report was submitted to evince where the evince (https://gitlab.gnome.org/GNOME/evince/issues/1024) team says:
The issue is in Poppler, the library used by Evince to render PDF, and it seems it has already been addressed.See https://gitlab.freedesktop.org/poppler/poppler/merge_requests/93 Nevertheless, if the issue is still present, please file a bug in https://gitlab.freedesktop.org/poppler/poppler/
Steps to reproduce
- Open NullPointerDeference.h_134 with evince.
- Segmentation fault (core dumped)
(gdb) run NullPointerDeference.h_134 Starting program: /usr/bin/evince NullPointerDeference.h_134 [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". [New Thread 0x7f9a71f06700 (LWP 12825)] [New Thread 0x7f9a71705700 (LWP 12826)] [New Thread 0x7f9a6bdf6700 (LWP 12827)] [New Thread 0x7f9a6b186700 (LWP 12832)] [New Thread 0x7f9a6a741700 (LWP 12834)] [New Thread 0x7f9a68acd700 (LWP 12835)] Thread 7 "EvJobScheduler" received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7f9a68acd700 (LWP 12835)] 0x00007f9a5622429a in _poppler_attachment_new(FileSpec*) () from /usr/lib/x86_64-linux-gnu/libpoppler-glib.so.8 (gdb) bt #0 0x00007f9a5622429a in _poppler_attachment_new(FileSpec*) () at /usr/lib/x86_64-linux-gnu/libpoppler-glib.so.8 #1 0x00007f9a5622814a in poppler_annot_file_attachment_get_attachment () at /usr/lib/x86_64-linux-gnu/libpoppler-glib.so.8 #2 0x00007f9a680c573d in () at /usr/lib/x86_64-linux-gnu/evince/4/backends/libpdfdocument.so #3 0x00007f9a7ddfabfa in () at /usr/lib/x86_64-linux-gnu/libevview3.so.3 #4 0x00007f9a7ddfcc02 in () at /usr/lib/x86_64-linux-gnu/libevview3.so.3 #5 0x00007f9a7b6f5e85 in () at /usr/lib/x86_64-linux-gnu/libglib-2.0.so.0 #6 0x00007f9a7b0cc6db in start_thread (arg=0x7f9a68acd700) at pthread_create.c:463 #7 0x00007f9a7adf588f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95 (gdb)
uname -a - Linux zero 4.15.0-38-generic #41 (closed)-Ubuntu SMP Wed Oct 10 10:59:38 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux Evince version: 3.28.4