File qpdf-CVE-2022-34503.patch of Package qpdf.25220

Index: qpdf-8.0.2/libqpdf/QPDF.cc
===================================================================
--- qpdf-8.0.2.orig/libqpdf/QPDF.cc
+++ qpdf-8.0.2/libqpdf/QPDF.cc
@@ -947,6 +947,13 @@ QPDF::processXRefStream(qpdf_offset_t xr
                           "Cross-reference stream's /W contains"
                           " impossibly large values");
         }
+        if (W[i] < 0)
+        {
+            throw QPDFExc(qpdf_e_damaged_pdf, this->m->file->getName(),
+                          "xref stream", xref_offset,
+                          "Cross-reference stream's /W contains"
+                          " negative values");
+        }
 	entry_size += W[i];
     }
     if (entry_size == 0)
openSUSE Build Service is sponsored by