Segmentation fault in Parser::getObj Function #54
Description
We’ve fuzzed pdf2json with AFL and found some crashes on Parser::getObj Function.
The input is
crash0.pdf
We found that there are lots of replications in the backtrace, forming as Parser::getObj -> Parser::makeStream -> Object::dictLookup -> XRef::fetch.
This indicates that pdf2json encountered an infinite recursive call in the getObj function, which ultimately led to a stack overflow.
The outputs of gdb, gdb backtrace and valgrind are show below.
gdb says: There is no error in the output.
gdb backtrace shows:
valgrind shows:
