Package: mupdf Version: 1.4-2 Usertags: goto-cc During a rebuild of all Debian packages in a clean sid chroot (using cowbuilder and pbuilder) the build failed with the following error. Please note that we use our research compiler tool-chain (using tools from the cbmc package), which permits extended reporting on type inconsistencies at link time.
[...]
CC build/release/pdf/pdf-op-run.o
source/pdf/pdf-op-run.c: In function 'load_font_or_hail_mary.isra.6':
source/pdf/pdf-op-run.c:1423:5: warning: 'desc' may be used uninitialized in
this function [-Wmaybe-uninitialized]
if (desc == NULL)
^
source/pdf/pdf-op-run.c: In function 'pdf_is_hidden_ocg':
source/pdf/pdf-op-run.c:316:10: warning: 'on' may be used uninitialized in this
function [-Wmaybe-uninitialized]
return !on;
^
file source/pdf/pdf-op-run.c line 1965 function pdf_run_J: in expression
`csi->stack[(signed long int)0]':
conversion from `float' to `fz_linecap': implicit conversion not permitted
CONVERSION ERROR
Makefile:151: recipe for target 'build/release/pdf/pdf-op-run.o' failed
make[2]: *** [build/release/pdf/pdf-op-run.o] Error 64
make[2]: Leaving directory
'/srv/jenkins-slave/workspace/sid-goto-cc-mupdf/mupdf-1.4'
debian/rules:35: recipe for target 'override_dh_auto_build' failed
make[1]: *** [override_dh_auto_build] Error 2
make[1]: Leaving directory
'/srv/jenkins-slave/workspace/sid-goto-cc-mupdf/mupdf-1.4'
debian/rules:46: recipe for target 'build' failed
make: *** [build] Error 2
The following lines exhibit dangerously undefined behaviour as user input is,
without further sanitisation, converted from float to a value-limited enum:
http://sources.debian.net/src/mupdf/1.4-2/source/pdf/pdf-op-run.c?hl=1965,1966,1967#L1965
This will work for nice users only. All other cases have undefined behaviour.
Best,
Michael
pgpIEx7eqY3BL.pgp
Description: PGP signature
