summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEven Rouault <even.rouault@spatialys.com>2024-02-20 20:43:11 +0100
committerAlbert Astals Cid <aacid@kde.org>2024-02-20 22:02:42 +0000
commit8d66d756dad4fbde0cd1b8b0f1ce8b08caa7a19d (patch)
tree262ca706fa45160d4901e572d2ddf78950918efb
parent6a4d5323efd9651ab2ee5a0f921bdeb55fa61b0b (diff)
SplashOutputDev::drawImageMask(): early break if getLine() fails
Related to https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66523
-rw-r--r--poppler/SplashOutputDev.cc4
1 files changed, 3 insertions, 1 deletions
diff --git a/poppler/SplashOutputDev.cc b/poppler/SplashOutputDev.cc
index 0559f5e9..7c66bb24 100644
--- a/poppler/SplashOutputDev.cc
+++ b/poppler/SplashOutputDev.cc
@@ -2660,7 +2660,9 @@ void SplashOutputDev::drawImageMask(GfxState *state, Object *ref, Stream *str, i
splash->fillImageMask(&imageMaskSrc, &imgMaskData, width, height, mat, t3GlyphStack != nullptr);
if (inlineImg) {
while (imgMaskData.y < height) {
- imgMaskData.imgStr->getLine();
+ if (!imgMaskData.imgStr->getLine()) {
+ break;
+ }
++imgMaskData.y;
}
}