Bug 460322

Summary:	<=app-text/poppler-0.24.0: pdfseparate passes user-passed argument to sprintf()
Product:	Gentoo Linux	Reporter:	Michał Górny <mgorny>
Component:	Current packages	Assignee:	Maciej Mrozowski <reavertm>
Status:	RESOLVED UPSTREAM
Severity:	normal	CC:	kde, printing
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Michał Górny archtester

2013-03-04 19:40:34 UTC

...and fails to validate it properly.

$ pdfseparate foo.pdf %d.pdf

works fine

$ pdfseparate foo.pdf '%03d.pdf'
Syntax Error: '%03d.pdf' must contain '%%d' if more than one page should be extracted

$ pdfseparate foo.pdf '%s%d.pdf'
Segmentation fault

Looks like someone relies on quite a weak argument validation.

Comment 1 Andreas K. Hüttel archtester

2013-08-24 14:52:51 UTC

Which poppler version is this? Does it still happen with app-text/poppler-0.24.0 ?

Comment 2 Michał Górny archtester

2013-08-24 18:48:44 UTC

Yep, I can reproduce it with that version.

Comment 3 Johannes Huber (RETIRED) gentoo-dev

2014-07-13 12:42:45 UTC

Seems fixed upstream, no segfaults with =app-text/poppler-0.26.2.