[okular] [Bug 407338] New: Okular segfaults when opening a file digitally signed with portablesigner and Acrobat Reader

[Ángel de Vicente]

https://bugs.kde.org/show_bug.cgi?id=407338

            Bug ID: 407338
           Summary: Okular segfaults when opening a file digitally signed
                    with portablesigner and Acrobat Reader
           Product: okular
           Version: 1.7.0
          Platform: Archlinux Packages
                OS: Linux
            Status: REPORTED
          Severity: critical
          Priority: NOR
         Component: general
          Assignee: okular-devel at kde.org
          Reporter: angelv at iac.es
  Target Milestone: ---

Created attachment 119916
  --> https://bugs.kde.org/attachment.cgi?id=119916&action=edit
Digitally signed documents (one gives the segmentation fault)

SUMMARY

I use the code portablesigner to digitally sign a document, and Okular can read
the generated document no problem (see example sample-sig.pdf attached).

My colleagues, who uses ADOBE Acrobat Reader DC Version 2019.010.20099 in a Mac
signs the same document, and Okular can read it no problem (see example
sample_victor.pdf attached).

But if he signs the file previously signed by me (so as to have it signed by
both of us), then Okular segfaults when trying to open the file (see example
sample_sig_victor.pdf).

This might not be a problem specific to Okular, since trying to see the
signatures with pdfsig (v. 0.76.1), also segfaults:


[angelv at bug]$ pdfsig sample_sig_victor.pdf
Digital Signature Info of: sample_sig_victor.pdf
Signature #1:
  - Signer Certificate Common Name: DE VICENTE GARRIDO ANGEL MANUEL - 30660835H
  - Signer full Distinguished Name: CN=DE VICENTE GARRIDO ANGEL MANUEL -
30660835H,SN=DE VICENTE GARRIDO,givenName=ANGEL
MANUEL,serialNumber=IDCES-30660835H,C=ES
  - Signing Time: May 08 2019 12:16:59
  - Signing Hash Algorithm: SHA1
  - Signature Type: adbe.pkcs7.sha1
  - Signed Ranges: [0 - 13426], [18278 - 24071]
  - Not total document signed
  - Signature Validation: Signature is Valid.
  - Certificate Validation: Certificate is Trusted.
Segmentation fault (core dumped)
[angelv at bug]$


SOFTWARE/OS VERSIONS
Linux: ArchLinux 

ADDITIONAL INFORMATION

-- 
You are receiving this mail because:
You are the assignee for the bug.