Fix for a number of integer overflow bugs discovered by Chris Evans.

[evince.git] / pdf / xpdf / Parser.cc

diff --git a/pdf/xpdf/Parser.cc b/pdf/xpdf/Parser.cc
index 2f881d46f1880e5a1a454a6b6c2f444e3f9b8bbc..0aa66d32ef0cdf33b18b25c9955d2e948bfd3eab 100644 (file)
--- a/pdf/xpdf/Parser.cc
+++ b/pdf/xpdf/Parser.cc
@@ -176,7 +176,7 @@ Stream *Parser::makeStream(Object *dict) {
   }
 
   // check for length in damaged file
-  if (xref->getStreamEnd(pos, &endPos)) {
+  if (xref && xref->getStreamEnd(pos, &endPos)) {
     length = endPos - pos;
   }