From dd15cd3cd5495800de5ca5c8a152147b485e124f Mon Sep 17 00:00:00 2001 From: Ken Sharp Date: Wed, 22 Jun 2022 15:48:58 +0100 Subject: OSS-fuzz #48167 This comes about because of the rework to return integers directly instead of as pointers to objects. The object mechanism pushed the objects onto the stack and so, on an error, popped them from the stack. The new method doesn't use the stack, so we must not pop objects from it! Even on error.... --- pdf/pdf_deref.c | 1 - 1 file changed, 1 deletion(-) (limited to 'pdf/pdf_deref.c') diff --git a/pdf/pdf_deref.c b/pdf/pdf_deref.c index 4872913b2..32646f5a9 100644 --- a/pdf/pdf_deref.c +++ b/pdf/pdf_deref.c @@ -699,7 +699,6 @@ static int pdfi_deref_compressed(pdf_context *ctx, uint64_t obj, uint64_t gen, p } if (i == entry->u.compressed.object_index) { if (found_object != obj) { - pdfi_pop(ctx, 1); code = gs_note_error(gs_error_undefined); goto exit; } -- cgit v1.2.1