Gfx::opSetFillGray: Make sure the colorspace is gray

Otherwise we will end up doing an uninitialized memory read down the
road

oss-fuzz/10040

1 files changed, 2 insertions, 1 deletions

diff --git a/poppler/Gfx.cc b/poppler/Gfx.cc
index 20d450ed..694538cf 100644
--- a/poppler/Gfx.cc
+++ b/poppler/Gfx.cc
@@ -1310,7 +1310,8 @@ void Gfx::opSetFillGray(Object args[], int numArgs)
     if (!obj.isNull()) {
         colorSpace = GfxColorSpace::parse(res, &obj, out, state);
     }
-    if (colorSpace == nullptr) {
+    if (colorSpace == nullptr || colorSpace->getNComps() != 1) {
+        delete colorSpace;
         colorSpace = state->copyDefaultGrayColorSpace();
     }
     state->setFillColorSpace(colorSpace);