Bug#924050: poppler-utils: pdfsig segfaults on signed PDF

Fri Mar 8 21:37:00 GMT 2019

Package: poppler-utils
Version: 0.71.0-3
Severity: important

Dear Maintainer,

$ /usr/bin/pdfsig ~/Downloads/bar.pdf
Digital Signature Info of: /home/wesleys/Downloads/bar.pdf
Internal Error (0): Input couldn't be parsed as a CMS signature
zsh: segmentation fault  /usr/bin/pdfsig ~/Downloads/bar.pdf

Mar  8 22:28:30 neptune kernel: [ 8383.032122] pdfsig[13393]: segfault
at 0 ip 00007fb1e04c96a1 sp 00007fffe6c20b48 error 4 in
libc-2.28.so[7fb1e038f000+148000]

I was hoping to see more information about bar.pdf

I installed poppler from the git repo and then you get this:

$ pdfsig ~/Downloads/bar.pdf
Digital Signature Info of: /home/wesleys/Downloads/bar.pdf
Internal Error (0): Input couldn't be parsed as a CMS signature
Signature #1:
- Signer Certificate Common Name: (null)
- Signer full Distinguished Name: (null)
- Signing Time: Mar 08 2019 11:10:19
- Signing Hash Algorithm: unknown
- Signature Type: adbe.pkcs7.detached
- Signed Ranges: [0 - 12877], [40303 - 123158]
- Total document signed
- Signature Validation: Unknown Validation Failure.

$ pdfsig -v
pdfsig version 0.74.0
Copyright 2005-2019 The Poppler Developers - http://poppler.freedesktop.org
Copyright 1996-2011 Glyph & Cog, LLC

Could you upgrade to the latest version? Many thanks.

* ldd from Debian package
$ ldd /usr/bin/pdfsig
linux-vdso.so.1 (0x00007ffd131f7000)
libpoppler.so.82 => /usr/lib/x86_64-linux-gnu/libpoppler.so.82 (0x00007fee16c4c000)
libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007fee16ac8000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007fee16907000)
libfreetype.so.6 => /usr/lib/x86_64-linux-gnu/libfreetype.so.6 (0x00007fee1684b000)
libfontconfig.so.1 => /usr/lib/x86_64-linux-gnu/libfontconfig.so.1 (0x00007fee16805000)
libjpeg.so.62 => /usr/lib/x86_64-linux-gnu/libjpeg.so.62 (0x00007fee1659c000)
libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007fee1637c000)
libnss3.so => /usr/lib/x86_64-linux-gnu/libnss3.so (0x00007fee1622e000)
libsmime3.so => /usr/lib/x86_64-linux-gnu/libsmime3.so (0x00007fee161ff000)
libnspr4.so => /usr/lib/x86_64-linux-gnu/libnspr4.so (0x00007fee161be000)
libopenjp2.so.7 => /usr/lib/x86_64-linux-gnu/libopenjp2.so.7 (0x00007fee16167000)
liblcms2.so.2 => /usr/lib/x86_64-linux-gnu/liblcms2.so.2 (0x00007fee1610a000)
libpng16.so.16 => /usr/lib/x86_64-linux-gnu/libpng16.so.16 (0x00007fee160cf000)
libtiff.so.5 => /usr/lib/x86_64-linux-gnu/libtiff.so.5 (0x00007fee16050000)
libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007fee1602f000)
libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007fee15eac000)
/lib64/ld-linux-x86-64.so.2 (0x00007fee16f65000)
libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007fee15e92000)
libexpat.so.1 => /lib/x86_64-linux-gnu/libexpat.so.1 (0x00007fee15e53000)
libuuid.so.1 => /lib/x86_64-linux-gnu/libuuid.so.1 (0x00007fee15e4a000)
libnssutil3.so => /usr/lib/x86_64-linux-gnu/libnssutil3.so (0x00007fee15e18000)
libplc4.so => /usr/lib/x86_64-linux-gnu/libplc4.so (0x00007fee15e11000)
libplds4.so => /usr/lib/x86_64-linux-gnu/libplds4.so (0x00007fee15e0c000)
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007fee15e07000)
librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007fee15dfb000)
libwebp.so.6 => /usr/lib/x86_64-linux-gnu/libwebp.so.6 (0x00007fee15b92000)
libzstd.so.1 => /usr/lib/x86_64-linux-gnu/libzstd.so.1 (0x00007fee15af2000)
liblzma.so.5 => /lib/x86_64-linux-gnu/liblzma.so.5 (0x00007fee15aca000)
libjbig.so.0 => /usr/lib/x86_64-linux-gnu/libjbig.so.0 (0x00007fee158bc000)

* ldd from source
$ ldd $HOME/.local/bin/pdfsig
linux-vdso.so.1 (0x00007ffcc1be8000)
libpoppler.so.85 => /home/wesleys/.local/lib/libpoppler.so.85 (0x00007f4091501000)
libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007f4091356000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f4091195000)
libfreetype.so.6 => /usr/lib/x86_64-linux-gnu/libfreetype.so.6 (0x00007f40910d9000)
libfontconfig.so.1 => /usr/lib/x86_64-linux-gnu/libfontconfig.so.1 (0x00007f4091093000)
libjpeg.so.62 => /usr/lib/x86_64-linux-gnu/libjpeg.so.62 (0x00007f4090e2a000)
libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f4090c0a000)
libcurl-gnutls.so.4 => /usr/lib/x86_64-linux-gnu/libcurl-gnutls.so.4 (0x00007f4090b7c000)
libopenjp2.so.7 => /usr/lib/x86_64-linux-gnu/libopenjp2.so.7 (0x00007f4090b25000)
liblcms2.so.2 => /usr/lib/x86_64-linux-gnu/liblcms2.so.2 (0x00007f4090ac8000)
libpng16.so.16 => /usr/lib/x86_64-linux-gnu/libpng16.so.16 (0x00007f4090a8f000)
libtiff.so.5 => /usr/lib/x86_64-linux-gnu/libtiff.so.5 (0x00007f4090a10000)
libnss3.so => /usr/lib/x86_64-linux-gnu/libnss3.so (0x00007f40908c0000)
libsmime3.so => /usr/lib/x86_64-linux-gnu/libsmime3.so (0x00007f4090891000)
libnspr4.so => /usr/lib/x86_64-linux-gnu/libnspr4.so (0x00007f4090850000)
libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f409082f000)
libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f40906ac000)
/lib64/ld-linux-x86-64.so.2 (0x00007f40917f5000)
libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007f4090692000)
libexpat.so.1 => /lib/x86_64-linux-gnu/libexpat.so.1 (0x00007f4090653000)
libuuid.so.1 => /lib/x86_64-linux-gnu/libuuid.so.1 (0x00007f409064a000)
libnghttp2.so.14 => /usr/lib/x86_64-linux-gnu/libnghttp2.so.14 (0x00007f4090622000)
libidn2.so.0 => /usr/lib/x86_64-linux-gnu/libidn2.so.0 (0x00007f4090603000)
librtmp.so.1 => /usr/lib/x86_64-linux-gnu/librtmp.so.1 (0x00007f40903e6000)
libssh2.so.1 => /usr/lib/x86_64-linux-gnu/libssh2.so.1 (0x00007f40903b8000)
libpsl.so.5 => /usr/lib/x86_64-linux-gnu/libpsl.so.5 (0x00007f40903a3000)
libnettle.so.6 => /usr/lib/x86_64-linux-gnu/libnettle.so.6 (0x00007f409036b000)
libgnutls.so.30 => /usr/lib/x86_64-linux-gnu/libgnutls.so.30 (0x00007f40901c0000)
libgssapi_krb5.so.2 => /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2 (0x00007f4090173000)
libkrb5.so.3 => /usr/lib/x86_64-linux-gnu/libkrb5.so.3 (0x00007f4090093000)
libk5crypto.so.3 => /usr/lib/x86_64-linux-gnu/libk5crypto.so.3 (0x00007f409005f000)
libcom_err.so.2 => /lib/x86_64-linux-gnu/libcom_err.so.2 (0x00007f4090057000)
libldap_r-2.4.so.2 => /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2 (0x00007f4090003000)
liblber-2.4.so.2 => /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2 (0x00007f408fff2000)
libwebp.so.6 => /usr/lib/x86_64-linux-gnu/libwebp.so.6 (0x00007f408fd89000)
libzstd.so.1 => /usr/lib/x86_64-linux-gnu/libzstd.so.1 (0x00007f408fce9000)
liblzma.so.5 => /lib/x86_64-linux-gnu/liblzma.so.5 (0x00007f408fcbf000)
libjbig.so.0 => /usr/lib/x86_64-linux-gnu/libjbig.so.0 (0x00007f408fab1000)
libnssutil3.so => /usr/lib/x86_64-linux-gnu/libnssutil3.so (0x00007f408fa7f000)
libplc4.so => /usr/lib/x86_64-linux-gnu/libplc4.so (0x00007f408fa78000)
libplds4.so => /usr/lib/x86_64-linux-gnu/libplds4.so (0x00007f408fa73000)
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f408fa6e000)
librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007f408fa62000)
libunistring.so.2 => /usr/lib/x86_64-linux-gnu/libunistring.so.2 (0x00007f408f8de000)
libhogweed.so.4 => /usr/lib/x86_64-linux-gnu/libhogweed.so.4 (0x00007f408f8a5000)
libgmp.so.10 => /usr/lib/x86_64-linux-gnu/libgmp.so.10 (0x00007f408f822000)
libgcrypt.so.20 => /lib/x86_64-linux-gnu/libgcrypt.so.20 (0x00007f408f704000)
libp11-kit.so.0 => /usr/lib/x86_64-linux-gnu/libp11-kit.so.0 (0x00007f408f5d3000)
libtasn1.so.6 => /usr/lib/x86_64-linux-gnu/libtasn1.so.6 (0x00007f408f3c0000)
libkrb5support.so.0 => /usr/lib/x86_64-linux-gnu/libkrb5support.so.0 (0x00007f408f3b1000)
libkeyutils.so.1 => /lib/x86_64-linux-gnu/libkeyutils.so.1 (0x00007f408f3aa000)
libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 (0x00007f408f390000)
libsasl2.so.2 => /usr/lib/x86_64-linux-gnu/libsasl2.so.2 (0x00007f408f371000)
libgpg-error.so.0 => /lib/x86_64-linux-gnu/libgpg-error.so.0 (0x00007f408f34e000)
libffi.so.6 => /usr/lib/x86_64-linux-gnu/libffi.so.6 (0x00007f408f344000)

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing'), (100, 'unstable'), (50, 'experimental'), (10, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-2-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages poppler-utils depends on:
ii  libc6         2.28-7
ii  libcairo2     1.16.0-3
ii  libfreetype6  2.9.1-3
ii  liblcms2-2    2.9-3
ii  libpoppler82  0.71.0-3
ii  libstdc++6    8.3.0-2

poppler-utils recommends no packages.

poppler-utils suggests no packages.

-- no debconf information