Check for overflow in page labels (fuzz issue 23599)

Jay Berkenbilt
1 parent 7f4a4df9
Showing 3 changed files with 1 additions and 1 deletions
TODO
fuzz/qpdf_extra/23599.fuzz
libqpdf/QPDFPageLabelDocumentHelper.cc
@@ -65,7 +65,6 @@ Fuzz Errors
 * https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=<N>
  
 * New:
-  * 23599: integer overflow: https://oss-fuzz.com/testcase?key=6290807920525312
   * 23642: leak: https://oss-fuzz.com/testcase-detail/4906569690251264
  
 * Ignoring these:
@@ -53,6 +53,7 @@ QPDFPageLabelDocumentHelper::getLabelForPage(long long page_idx)
     {
         start = St.getIntValue();
     }
+    QIntC::range_check(start, offset);
     start += offset;
     result = QPDFObjectHandle::newDictionary();
     result.replaceOrRemoveKey("/S", S);