Bug: Buffer Overflow into Out-of-Bounds Write about pdfresurrect HOT 7 CLOSED

Thanks a ton for this! I'll work on a patch.

from pdfresurrect.

I've fixed the issue with the overflow; however, we are dropping some type names (e.g., less descriptive and returning "Unknown" more frequently than I expect. This doesn't concern me too much, as I don't really know if reporting type names is all that valuable to users. The fix is currently in its own branch: https://github.com/enferex/pdfresurrect/tree/carter-fix

Edit: I plan on merging this into master once I get a better understanding of why we are loosing more type names.

from pdfresurrect.

I've fixed the type name information, now we should maintain consistency with reporting names as we were in v.19, but with the added sanity check now.

from pdfresurrect.

This issue appears to have been assigned CVE-2020-9549.

from pdfresurrect.

This issue appears to have been assigned CVE-2020-9549.

Yep, thanks for following up with that. Master has the latest fixes.

from pdfresurrect.

@enferex 36b67e5 and bfa81b9 specifically?

from pdfresurrect.

@enferex 36b67e5 and bfa81b9 specifically?

Yep, they should be the ones.

from pdfresurrect.