commit 89a5367d49b2556a2635dbb6d48d6a6b182a2c6c
author Albert Astals Cid <aacid@kde.org> Thu May 23 00:54:29 2019 +0200
committer Albert Astals Cid <aacid@kde.org> Thu May 23 00:57:01 2019 +0200
tree f146e9a7c628c8e4ac1c9e708f2a2948c9142164
parent 65adf225eca287f63361cf49bd47388bff81af79

JPEG2000Stream: fail gracefully if not all components have the same WxH

I think this is just a mistake, or at least the only file we have with
this scenario is a fuzzed one

poppler/JPEG2000Stream.cc

diff --git a/poppler/JPEG2000Stream.cc b/poppler/JPEG2000Stream.cc
index 15bbcae..0eea3a2 100644
--- a/poppler/JPEG2000Stream.cc
+++ b/poppler/JPEG2000Stream.cc
@@ -4,7 +4,7 @@
 //
 // A JPX stream decoder using OpenJPEG
 //
-// Copyright 2008-2010, 2012, 2017, 2018 Albert Astals Cid <aacid@kde.org>
+// Copyright 2008-2010, 2012, 2017-2019 Albert Astals Cid <aacid@kde.org>
 // Copyright 2011 Daniel Glöckner <daniel-gl@gmx.net>
 // Copyright 2014, 2016 Thomas Freitag <Thomas.Freitag@alfa.de>
 // Copyright 2013, 2014 Adrian Johnson <ajohnson@redneon.com>
@@ -253,6 +253,12 @@
         close();
         break;
       }
+      const int componentPixels = priv->image->comps[component].w * priv->image->comps[component].h;
+      if (componentPixels != priv->npixels) {
+        error(errSyntaxWarning, -1, "Component {0:d} has different WxH than component 0", component);
+        close();
+        break;
+      }
       unsigned char *cdata = (unsigned char *)priv->image->comps[component].data;
       int adjust = 0;
       int depth = priv->image->comps[component].prec;