Skip to content

addStrokeAdjustHint(): fix crash in out-of-memory situation.

Albert Astals Cid requested to merge aacid/poppler:ossfuzz_crash into master

Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25411

#0 0xf7ef8f19 in [vdso]
#1 0xf7ccdd08 in gsignal (/lib32/libc.so.6+0x2bd08)
#2 0xf7ccf206 in abort (/lib32/libc.so.6+0x2d206)
#3 0xbdb9c2e in grealloc(void*, unsigned int, bool) gdal/poppler/goo/gmem.h:85:5
#4 0xbdd9e11 in greallocn(void*, int, int, bool, bool) gdal/poppler/goo/gmem.h:171:12
#5 0xc012373 in SplashPath::addStrokeAdjustHint(int, int, int, int) gdal/poppler/splash/SplashPath.cc:211:35
#6 0xbfd156f in Splash::makeStrokePath(SplashPath*, double, bool) gdal/poppler/splash/Splash.cc:5987:34
#7 0xbfcaec2 in Splash::strokeWide(SplashPath*, double) gdal/poppler/splash/Splash.cc:2028:13
#8 0xbfc8a4d in Splash::stroke(SplashPath*) /src/gdal/poppler/splash/Splash.cc

Based on patch by Even Rouault

Merge request reports