Re: [Podofo-users] CVE fix proposal

Hi Mark, hi all, > Mark Rogers has written on 8 April 2017 at > 10:01: > > Hi > > There are the CVEs in ReadXRefSubsection: > > CVE-2017-6844 global buffer overflow in PdfParser::ReadXRefSubsection > CVE-2017-5855 NULL pointer dereference in PdfParser::ReadXRefSubsection > CVE-2017-5853 signe

[Podofo-users] Miscalculation of object number in PdfDocument::Append function

Hi, PdfDocument::Append calculate the new object number by applying a constant offset. https://sourceforge.net/p/podofo/code/1837/tree/podofo/trunk/src/doc/PdfDocument.cpp#l301 The calculation is only valid if there is no object being created during the appending process. This is not alway

[Podofo-users] Compile failure with openssl-1.1

Please consider the downstream reported bug: https://bugs.gentoo.org/show_bug.cgi?id=614756 Agostino Sarubbo Gentoo Linux Developer -- Check out the vibrant tech community on one of the world's most engaging tech sites, S

[Podofo-users] Mac ".dfont" support

Good time of day. On my mac machine Podofo prints: DEBUG: Warning: Unrecognized FontFormat: /System/Library/Fonts/Helvetica.dfont I have searched code and indeed Podofo returns ePdfFontType_Unknown for dfont https://pastebin.com/4Y8ZKXPf but despite that I have found code that should handle df

Re: [Podofo-users] CVE fix proposal

Hi There are the CVEs in ReadXRefSubsection: CVE-2017-6844 global buffer overflow in PdfParser::ReadXRefSubsection CVE-2017-5855 NULL pointer dereference in PdfParser::ReadXRefSubsection CVE-2017-5853 signed integer overflow in PdfParser.cpp CVE-2017-6844 and CVE-2017-5853 are caused by 3 relate