mirrors/pdf.js
1
0
Fork 0
mirror of https://github.com/mozilla/pdf.js.git synced 2025-04-19 14:48:08 +02:00
Code Activity

Read a signed integer when using PUSHW in sanitizing a font (bug 1919513)

Browse source
This commit is contained in:
Calixte Denizet 2024-09-18 22:09:17 +02:00
parent 19151feb5f
commit 78dd35483c
4 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/core/fonts.js
View file

@ -2387,7 +2387,7 @@ class Font {
} else {
for (j = 0; j < n; j++) {
b = data[i++];
stack.push((b << 8) | data[i++]);
stack.push(signedInt16(b, data[i++]));
}
}
} else if (op === 0x2b && !tooComplexToFollowFunctions) {

1
test/pdfs/.gitignore vendored
View file

@ -668,3 +668,4 @@
!issue18694.pdf
!issue18693.pdf
!bug1918115.pdf
!bug1919513.pdf

BIN
test/pdfs/bug1919513.pdf Executable file
View file

Binary file not shown.

8
test/test_manifest.json
View file

@ -10482,5 +10482,13 @@
"rounds": 1,
"link": true,
"type": "eq"
},
{
"id": "bug1919513",
"file": "pdfs/bug1919513.pdf",
"md5": "83d1a7fab2c81e632910c334879e7334",
"rounds": 1,
"talos": false,
"type": "eq"
}
]