In Pl_ASCII85Decoder do not run finish after a runtime_error

Fixes oss-fuzz cases 376305073, 389974979 and 391974927.

In Pl_ASCII85Decoder do not run finish after a runtime_error
Fixes oss-fuzz cases 376305073, 389974979 and 391974927.
m-holger
1 parent e324d36b
Showing 7 changed files with 9 additions and 1 deletions
fuzz/CMakeLists.txt
fuzz/qpdf_extra/376305073.fuzz
fuzz/qpdf_extra/389974979.fuzz
fuzz/qpdf_extra/391974927.fuzz
fuzz/qtest/fuzz.test
libqpdf/Pl_ASCII85Decoder.cc
libqpdf/qpdf/Pl_ASCII85Decoder.hh
@@ -146,7 +146,10 @@ set(CORPUS_OTHER
   99999e.fuzz
   369662293.fuzz
   369662293a.fuzz
+  376305073.fuzz
   377977949.fuzz
+  389974979.fuzz
+  391974927.fuzz
 )
 set(CORPUS_DIR ${CMAKE_CURRENT_BINARY_DIR}/qpdf_corpus)
@@ -11,7 +11,7 @@ my $td = new TestDriver(&#39;fuzz&#39;);
 my $qpdf_corpus = $ENV{'QPDF_FUZZ_CORPUS'} || die "must set QPDF_FUZZ_CORPUS";
-my $n_qpdf_files = 84;       # increment when adding new files
+my $n_qpdf_files = 87;       # increment when adding new files
 my @fuzzers = (
     ['ascii85' => 1],
@@ -58,6 +58,7 @@ Pl_ASCII85Decoder::write(unsigned char const* buf, size_t len)
             default:
                 if ((buf[i] < 33) || (buf[i] > 117)) {
+                    error = true;
                     throw std::runtime_error("character out of range during base 85 decode");
                 } else {
                     this->inbuf[this->pos++] = buf[i];
@@ -103,6 +104,9 @@ Pl_ASCII85Decoder::flush()
 void
 Pl_ASCII85Decoder::finish()
 {
+    if (error) {
+        return;
+    }
     flush();
     next()->finish();
 }
@@ -17,6 +17,7 @@ class Pl_ASCII85Decoder final: public Pipeline
     unsigned char inbuf[5]{117, 117, 117, 117, 117};
     size_t pos{0};
     size_t eod{0};
+    bool error{false};
 };
 #endif // PL_ASCII85DECODER_HH