Headline
CVE-2023-2664: A stack-overflow in xpdf4.04 - forum.xpdfreader.com
In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow.
BabyBus
Posts: 4
Joined: Tue Apr 11, 2023 5:23 am
A stack-overflow in xpdf4.04
We found another stack overflow vulnerability in xpdf4.04，at Catalog::readEmbeddedFileTree(Object*) xpdf-4.04/xpdf/Catalog.cc:766.
Command Input
poc_file are attached.
Sanitizer Dump
Code: Select all
AddressSanitizer:DEADLYSIGNAL
=================================================================
==2689742==ERROR: AddressSanitizer: stack-overflow on address 0x7fff983ccf88 (pc 0x0000004cec06 bp 0x7fff983cd7d0 sp 0x7fff983ccf90 T0)
#0 0x4cec06 in __asan_memcpy /root/test/fuzzing_python/llvm-project-llvmorg-12.0.0/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cpp:22:3
#1 0x6b1ad8 in Object::copy(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Object.cc:81:8
#2 0x726369 in XRef::fetch(int, int, Object*, int) /root/target/Invariants/xpdf-4.04/xpdf/XRef.cc:1212:20
#3 0x6b1f0c in Object::fetch(XRef*, Object*, int) /root/target/Invariants/xpdf-4.04/xpdf/Object.cc:116:16
#4 0x55f8b6 in Dict::lookup(char const*, Object*, int) /root/target/Invariants/xpdf-4.04/xpdf/Dict.cc:125:35
#5 0x51fa83 in Object::dictLookup(char const*, Object*, int) /root/target/Invariants/xpdf-4.04/xpdf/Object.h:267:18
#6 0x5380f2 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:771:15
#7 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#8 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#9 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#10 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#11 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#12 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#13 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#14 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#15 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#16 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#17 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#18 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#19 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#20 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#21 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#22 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#23 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#24 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#25 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#26 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#27 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#28 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#29 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#30 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#31 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#32 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#33 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#34 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#35 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#36 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#37 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#38 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#39 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#40 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#41 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#42 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#43 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#44 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#45 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#46 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#47 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#48 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#49 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#50 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#51 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#52 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#53 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#54 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#55 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#56 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#57 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#58 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#59 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#60 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#61 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#62 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#63 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#64 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#65 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#66 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#67 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#68 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#69 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#70 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#71 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#72 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#73 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#74 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#75 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#76 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#77 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#78 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#79 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#80 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#81 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#82 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#83 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#84 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#85 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#86 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#87 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#88 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#89 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#90 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#91 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#92 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#93 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#94 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#95 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#96 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#97 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#98 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#99 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#100 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#101 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#102 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#103 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#104 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#105 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#106 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#107 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#108 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#109 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#110 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#111 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#112 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#113 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#114 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#115 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#116 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#117 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#118 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#119 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#120 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#121 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#122 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#123 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#124 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#125 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#126 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#127 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#128 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#129 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#130 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#131 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#132 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#133 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#134 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#135 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#136 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#137 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#138 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#139 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#140 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#141 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#142 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#143 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#144 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#145 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#146 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#147 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#148 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#149 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#150 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#151 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#152 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#153 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#154 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#155 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#156 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#157 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#158 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#159 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#160 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#161 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#162 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#163 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#164 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#165 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#166 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#167 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#168 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#169 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#170 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#171 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#172 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#173 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#174 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#175 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#176 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#177 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#178 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#179 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#180 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#181 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#182 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#183 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#184 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#185 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#186 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#187 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#188 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#189 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#190 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#191 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#192 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#193 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#194 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#195 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#196 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#197 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#198 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#199 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#200 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#201 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#202 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#203 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#204 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#205 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#206 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#207 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#208 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#209 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#210 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#211 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#212 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#213 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#214 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#215 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#216 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#217 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#218 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#219 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#220 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#221 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#222 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#223 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#224 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#225 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#226 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#227 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#228 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#229 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#230 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#231 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#232 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#233 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#234 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#235 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#236 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#237 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#238 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#239 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#240 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#241 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#242 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#243 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#244 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#245 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#246 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#247 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
#248 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
SUMMARY: AddressSanitizer: stack-overflow /root/test/fuzzing_python/llvm-project-llvmorg-12.0.0/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cpp:22:3 in __asan_memcpy
==2689742==ABORTING
Environment
OS: Ubuntu 20.04.1
clang:12.0.0
xpdf:4.04
Attachments
poc_file.zip
(12.55 KiB) Downloaded 10 times
BabyBus
Posts: 4
Joined: Tue Apr 11, 2023 5:23 am
Re: A stack-overflow in xpdf4.04
Post by BabyBus » Thu May 04, 2023 10:01 am
Thank you for your prompt response regarding the object loop vulnerability that I reported. I appreciate that you are actively working on a more robust loop detector for Xpdf 5 to address this issue.
As this vulnerability has security implications, I would like to request a CVE identifier to track the public disclosure and resolution of the issue. Please let me know if there is any additional information or evidence I can provide to assist with your CVE application process.
Thank you again for your attention to this matter.
Related news
Gentoo Linux Security Advisory 202409-25
Gentoo Linux Security Advisory 202409-25 - Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service. Versions greater than or equal to 4.05 are affected.