Martin Vogel e1dfdab5cb pdf: reads that gcc -O2 sees as set (Linux production build) ...

The Linux arm64 production build (gcc -O2 -Werror) stopped on
maybe-uninitialized in the TrueType cmap readers and the cross-reference
stream rows: ttf_fmt4 and ttf_fmt12 ignored the results of rd16/rd32 after a
bounds check that makes every read succeed, and xref_rows read pairs[] that
only the default /Index branch fills. The ASan test build did not warn.

The reads now fail the map on a failed read (the prototype's short-slice
rule; never taken, the bounds check stands before them), and pairs[] starts
at zero where it is declared. Text output is unchanged.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-10-09 02:55:23 +02:00

..

pdf_font.c

pdf: reads that gcc -O2 sees as set (Linux production build)

2026-10-09 02:55:23 +02:00

pdf_internal.h

pdf: forms read again are bounded per document

2026-10-09 02:55:23 +02:00

pdf_obj.c

pdf: reads that gcc -O2 sees as set (Linux production build)

2026-10-09 02:55:23 +02:00

pdf_tables.c

doc-links(pdf): notices for the PDF tables; the Unicode table generator

2026-10-09 02:55:23 +02:00

pdf_text.c

pdf: forms read again are bounded per document

2026-10-09 02:55:23 +02:00

pdf_unicode.c

doc-links(pdf): notices for the PDF tables; the Unicode table generator

2026-10-09 02:55:23 +02:00

pdf_unicode.h

doc-links(pdf): PDF pages as Sections, linked to the code their text names

2026-10-09 02:55:23 +02:00

pdf.h

pdf: forms read again are bounded per document

2026-10-09 02:55:23 +02:00