File poppler-CVE-2022-38349.patch of Package poppler.34111
Index: poppler-0.24.4/poppler/PDFDoc.cc
===================================================================
--- poppler-0.24.4.orig/poppler/PDFDoc.cc
+++ poppler-0.24.4/poppler/PDFDoc.cc
@@ -1485,6 +1485,9 @@ void PDFDoc::replacePageDict(int pageNo,
Ref *refPage = getCatalog()->getPageRef(pageNo);
Object page;
getXRef()->fetch(refPage->num, refPage->gen, &page);
+ if (!page.isDict()) {
+ return;
+ }
Dict *pageDict = page.getDict();
pageDict->remove("MediaBox");
pageDict->remove("CropBox");
Index: poppler-0.24.4/utils/pdfunite.cc
===================================================================
--- poppler-0.24.4.orig/utils/pdfunite.cc
+++ poppler-0.24.4/utils/pdfunite.cc
@@ -119,6 +119,14 @@ int main (int argc, char *argv[])
Ref *refPage = docs[i]->getCatalog()->getPageRef(j);
Object page;
docs[i]->getXRef()->fetch(refPage->num, refPage->gen, &page);
+ if (!page.isDict()) {
+ fclose(f);
+ delete yRef;
+ delete countRef;
+ delete outStr;
+ error(errSyntaxError, -1, "PDFDoc::replacePageDict failed.");
+ return -1;
+ }
pages.push_back(page);
offsets.push_back(numOffset);
Dict *pageDict = page.getDict();