Created attachment 175906 [details] Signed PDF with 2 dummy signatures Steps to reproduce: 1. Open LibreOffice 2. Open attached pdf file (Signed PDF with 2 dummy signatures) Result: crash Version: 7.3.0.0.alpha0+ / LibreOffice Community Build ID: bba6a4ed92a0feb288a9dedd648d623bee02a3ce CPU threads: 16; OS: Linux 5.3; UI render: default; VCL: gtk3 Locale: pl-PL (pl_PL.utf8); UI: en-US Calc: threaded Code pointers: Crash place: https://opengrok.libreoffice.org/xref/core/xmlsecurity/source/helper/pdfsignaturehelper.cxx?r=5cd87f19#278 Null pointer because getAnnotation failed: https://opengrok.libreoffice.org/xref/core/vcl/source/pdf/PDFiumLibrary.cxx?r=8cecaa62#698
Szymon Kłos committed a patch related to this issue. It has been pushed to "master": https://git.libreoffice.org/core/commit/97b15bcc2d15dd754afbfbf8709fa62a9866160e tdf#145312 xmlsecurity: prevent from crash when cannot receive pdfium annotation It will be available in 7.3.0. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.
I pushed a guard to prevent from crashing but bug is not solved. There are 2 signatures in this document but only one is shown in "File -> Digital signatures -> Digital signatures..." dialog.
Dear Szymon Kłos, This bug has been in ASSIGNED status for more than 3 months without any activity. Resetting it to NEW. Please assign it back to yourself if you're still working on this.
Issue verified in Version: 7.4.0.0.alpha0+ / LibreOffice Community Build ID: 08c979e235aa993f50e54224f8c715bb70697c33 CPU threads: 8; OS: Linux 5.10; UI render: default; VCL: gtk3 Locale: es-ES (es_ES.UTF-8); UI: en-US Calc: threaded Closing as VERIFIED FIXED
Xisco Fauli committed a patch related to this issue. It has been pushed to "master": https://git.libreoffice.org/core/commit/4351a6ca782e1d2081ba819338ebbf6a2d2ee2b2 tdf#145312: xmlsecurity_pdfsigning: Add unittest It will be available in 7.4.0. The patch should be included in the daily builds available at https://dev-builds.libreoffice.org/daily/ in the next 24-48 hours. More information about daily builds can be found at: https://wiki.documentfoundation.org/Testing_Daily_Builds Affected users are encouraged to test the fix and report feedback.