File CVE-2019-9959.patch of Package poppler.31330
From 68ef84e5968a4249c2162b839ca6d7975048a557 Mon Sep 17 00:00:00 2001
From: Albert Astals Cid <aacid@kde.org>
Date: Mon, 15 Jul 2019 23:24:22 +0200
Subject: [PATCH] JPXStream::init: ignore dict Length if clearly broken
Fixes issue #805
---
poppler/JPEG2000Stream.cc | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
Index: poppler-0.62.0/poppler/JPEG2000Stream.cc
===================================================================
--- poppler-0.62.0.orig/poppler/JPEG2000Stream.cc 2017-12-03 20:25:06.000000000 +0100
+++ poppler-0.62.0/poppler/JPEG2000Stream.cc 2021-11-23 18:50:36.985823517 +0100
@@ -221,7 +221,7 @@ void JPXStream::init()
}
int bufSize = BUFFER_INITIAL_SIZE;
- if (oLen.isInt()) bufSize = oLen.getInt();
+ if (oLen.isInt() && oLen.getInt() > 0) bufSize = oLen.getInt();
if (cspace.isArray() && cspace.arrayGetLength() > 0) {
Object cstype = cspace.arrayGet(0);