From 5b015a2737bfe555edd4812a5f8aef8d76a6dc86 Mon Sep 17 00:00:00 2001 From: Albert Astals Cid Date: Wed, 26 Mar 2025 11:26:32 +0100 Subject: [PATCH] [PATCH] Make sure regex doesn't stack overflow by limiting it Happens with very long pdfsubver strings when compiled with -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -flto=auto Origin: 25.04.0 Gbp-Pq: Name CVE-2025-43718.patch --- poppler/PDFDoc.cc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/poppler/PDFDoc.cc b/poppler/PDFDoc.cc index f0dae9b..118c469 100644 --- a/poppler/PDFDoc.cc +++ b/poppler/PDFDoc.cc @@ -14,7 +14,7 @@ // under GPL version 2 or later // // Copyright (C) 2005, 2006, 2008 Brad Hards -// Copyright (C) 2005, 2007-2009, 2011-2024 Albert Astals Cid +// Copyright (C) 2005, 2007-2009, 2011-2025 Albert Astals Cid // Copyright (C) 2008 Julien Rebetez // Copyright (C) 2008, 2010 Pino Toscano // Copyright (C) 2008, 2010, 2011 Carlos Garcia Campos @@ -479,7 +479,7 @@ static PDFSubtypePart pdfPartFromString(PDFSubtype subtype, const std::string &p static PDFSubtypeConformance pdfConformanceFromString(const std::string &pdfsubver) { - const std::regex regex("PDF/(?:A|X|VT|E|UA)-[[:digit:]]([[:alpha:]]+)"); + const std::regex regex("PDF/(?:A|X|VT|E|UA)-[[:digit:]]([[:alpha:]]{1,3})"); std::smatch match; // match contains the PDF conformance (A, B, G, N, P, PG or U) -- 2.30.2