Hey ports@ I apologize if this is the incorrect place to send this message as I wasn't sure who the maintainer was. I found a bug that crashes xpdf-3.02.4p1 and wrote a patch for it. This crash happens when a pdf file has an object whose length is derived from an indirect object reference but instead the reference points to the original object itself. I provided an example below and attached the patch to this message.
Regards, Grant Friday Example: Normal: 2 0 obj <</Length 3 0 R>> stream "data here" endstream Crash: 2 0 obj <</Length 2 0 R>> stream "data here" endstream Indirect Object: 3 0 obj "integer size here" endobj
patch-xpdf_Parser_cc
Description: Binary data
