diff options
| author | Ken Sharp <ken.sharp@artifex.com> | 2022-08-23 13:02:44 +0100 |
|---|---|---|
| committer | Ken Sharp <ken.sharp@artifex.com> | 2022-08-23 13:02:44 +0100 |
| commit | 26ac324702b9c4fa73dfdc7f91a714ff6d6336f9 (patch) | |
| tree | c502e19ed681d7746d427e68ffcc95578dd934f4 /psi | |
| parent | 7afd196669cbec02d8e0bbaf7bee4a1b59790a1b (diff) | |
| download | ghostpdl-26ac324702b9c4fa73dfdc7f91a714ff6d6336f9.tar.gz | |
GhostPDF - use recursive array fetch to avoid circular reference
Bug #705777 " stack overflow in psi/idict.c:160 dict_alloc (exploitable)"
Diffstat (limited to 'psi')
| -rw-r--r-- | psi/zpdfops.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/psi/zpdfops.c b/psi/zpdfops.c index 48bcbb1d8..c20921d3f 100644 --- a/psi/zpdfops.c +++ b/psi/zpdfops.c @@ -787,7 +787,7 @@ static int PDFarray_to_PSarray(i_ctx_t *i_ctx_p, pdfctx_t *pdfctx, pdf_array *PD goto error; for (i = 0;i < pdfi_array_size(PDFarray); i++) { - code = pdfi_array_get(pdfctx->ctx, PDFarray, i, &array_obj); + code = pdfi_array_fetch_recursing(pdfctx->ctx, PDFarray, i, &array_obj, true, true); if (code < 0) goto error; code = PDFobj_to_PSobj(i_ctx_p, pdfctx, array_obj, &PS_ref); |