Fix invalid memory access in 1150.pdf.asan.8.69

1 files changed, 4 insertions, 1 deletions

diff --git a/splash/Splash.cc b/splash/Splash.cc
index af609b46..d0d986ef 100644
--- a/splash/Splash.cc
+++ b/splash/Splash.cc
@@ -2254,3 +2254,3 @@ SplashPath *Splash::makeDashedPath(SplashPath *path) {
   if (lineDashStartPhase > 0) {
-    while (lineDashStartPhase >= state->lineDash[lineDashStartIdx]) {
+    while (lineDashStartIdx < state->lineDashLength && lineDashStartPhase >= state->lineDash[lineDashStartIdx]) {
       lineDashStartOn = !lineDashStartOn;
@@ -2259,2 +2259,5 @@ SplashPath *Splash::makeDashedPath(SplashPath *path) {
     }
+    if (unlikely(lineDashStartIdx == state->lineDashLength)) {
+      return new SplashPath();
+    }
   }