460322 – <=app-text/poppler-0.24.0: pdfseparate passes user-passed argument to sprintf()

Bug 460322 - <=app-text/poppler-0.24.0: pdfseparate passes user-passed argument to sprintf()

Summary: <=app-text/poppler-0.24.0: pdfseparate passes user-passed argument to sprintf()

Status:	RESOLVED UPSTREAM

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Maciej Mrozowski

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2013-03-04 19:40 UTC by Michał Górny
Modified:	2014-07-13 12:42 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Michał Górny archtester

2013-03-04 19:40:34 UTC

...and fails to validate it properly.

$ pdfseparate foo.pdf %d.pdf

works fine

$ pdfseparate foo.pdf '%03d.pdf'
Syntax Error: '%03d.pdf' must contain '%%d' if more than one page should be extracted

$ pdfseparate foo.pdf '%s%d.pdf'
Segmentation fault

Looks like someone relies on quite a weak argument validation.

Comment 1 Andreas K. Hüttel archtester

2013-08-24 14:52:51 UTC

Which poppler version is this? Does it still happen with app-text/poppler-0.24.0 ?

Comment 2 Michał Górny archtester

2013-08-24 18:48:44 UTC

Yep, I can reproduce it with that version.

Comment 3 Johannes Huber (RETIRED) gentoo-dev

2014-07-13 12:42:45 UTC

Seems fixed upstream, no segfaults with =app-text/poppler-0.26.2.