  characters on one line.
Invert subtractive color components before passing them to the
  blending function.
Fix an invalid array access in SplashOutputDev::setSoftMask() in CMYK
  mode.
A PS interpreter may attempt to read past the end of a preloaded
  image, so we need to check for that.
Fixed several overflow/uninit bugs in JBIG2Stream.
Fix the CCITTFax decoder to correctly find end-of-file (RTC/EOFB)
  markers when the EndOfLine parameter is false.
Don't limit the startxref offset to 10 digits - some PDF generators
  use extra leading zeros.
Use the "DV" (default value) field in text annotations if the "V"
  (value) field is missing.
Increase the number of digits printed for floating point numbers in
  PostScript output -- it was running into numerical accuracy problems
  on large pages.
Fixed integer overflow bugs in Catalog.cc and GfxFont.cc.
Zero-length tables in TrueType fonts should be treated as missing.
ToUnicode CMaps map char codes to Unicode; .cidToUnicode files map
  CIDs to Unicode -- ToUnicodeCMaps were being handled incorrectly.
Added the "psRasterResolution" and "psRasterMono" xpdfrc commands.
Added code to FoFiTrueType to check for entries in the table directory
  with bogus tags -- this handles the case where the number of tables
  given in the header is too high.
Negative shift values in the PostScript bitshift operator were being
  handled incorrectly.
GfxICCBasedColorSpace was not correctly bounds-checking the number of
  components.
Check SampledFunction input values for NaNs.
Fix a divide-by-zero when the page width or height is zero.
Fix a bug positioning text in PostScript output - if the last char in
  a string has an incorrect width in the PDF font object, that messes
  up the total string width, so we have to position individual chars.
In PostScript output, if CID font substitution fails, drop all text in
  that font.
Handle PDF files that set the stream/string decryption filters to
  Identity (i.e., no encryption).
Avoid passing a zero font size to FreeType.
Tweak raw mode in the text extractor to handle words on the same line
  drawn in the wrong order.
Pdftops was generating a singular transform matrix for annotations
  whose bounding boxes had zero width or height.
Handle embedded OpenType CFF fonts with CIDToGIDMaps.
Remove the old kludge from PSOutputDev that was converting char 32
  from ".notdef" to "space".
Allow CCITTFax images to be more than 32k pixels wide.
Modified the CMap parser to handle usecmap with Identity-H/V.
Added some parameter checking in the JPX decoder.
Added checks for infinite loops in PDF objects - for color spaces,
  functions, optional content, and outline items.  
Add support for mouse button bindings up to button 32 (old limit was
  7).
Fixed a bug in the decryption code for revision 3 with keyLength < 16
  -- the owner password was not being handled correctly.  [Thanks to
  Matthias Franz.]
Optimize SampledFunction: pull index computation code out of the
  transform function; cache the last transform.
Tweaked the font naming algorithm in PSOutputDev.
Treat mirrored (as opposed to rotated) text the same as upright text
  in pdftotext.
Fixed buffer overflows in Splash and SplashBitmap.
Check for bogus character codes (e.g., <ffffffff>) in ToUnicode CMaps.
The radial shading code (in both Gfx.cc and PSOutputDev.cc) was not
  computing the s bounds properly.
Drop empty subpaths in clip and fill (but not stroke) operations -
  this can significantly speed up clip performance in the weird case
  where a PDF file does "<x> <y> <w> <h> re <x> <y> m h W n".
Added code to FoFiTrueType to check for an invalid loca format field
  in the head table.
The axial shading code (in Gfx.cc, but not PSOutputDev.cc) was not
  computing the incremental polygon vertices correctly.
Set the character width in TextOutputDev to something sensible for
  vertical fonts.
Added basic support to the text extractor for vertical writing mode.
The non-interactive tools (pdftotext, pdftops) now free Page objects
  after using them, avoiding performance problems with pages that have
  huge resource dictionaries.
Check for line dash arrays like [0], and draw nothing at all (to match
  Acrobat's behavior).
Add a sanity check for the ascent/descent values in FontDescriptors.
Single-point paths with a line dash were causing a crash.
Correctly handle Level 3 PostScript output with masked images inside
  patterns.
Tweaked the xref repair code so that it runs if the catalog is messed
  up (in addition to running if the xref table is damaged).
If Indexed color space tables (streams or strings) are too small,
  reduce the max index instead of throwing away the color space.
Change the CMap parser to allocate memory only when it sees a mapping,
  not when it sees a 'codespacerange' declaration -- this avoids
  allocating huge amounts of memory for CMaps with large, unused
  codespaceranges.
In monochrome mode, treat lines with width <= 1 as hairlines (to match
  Acrobat's behavior).
Cache the last transform for PostScript-type functions.
Added the "-rawdates" option to pdfinfo.
Optimized ImageStream::getLine().
Fixed the Hue, Saturation, Color, and Luminosity blend functions to
  match Adobe's spec.
Fixed the non-isolated group compositing computation.
Skip extraneous unused data at the end of JBIG2 segments.
Change the algorithm that stroke/fill adjustment uses so that the
  edges of adjacent strokes/fills line up.
Do stroke adjustment on end caps when cap style is butt or projecting.
Fixed a security hole: Gfx.parser was not being initialized to NULL.
Fixed a security hole: integer bounds check in the Type 1 encoding
  parser in FoFiType1.cc.
If an embedded font object is invalid or non-existent, do font
  substitution (same as if there were no embedded font).
TextOutputDev was reusing an old font in the case where the font
  changed but the font size and character positioning stayed the same.
When starting a transparency group, copy the fill/stroke colors from
  the graphics state.
Tweaked the fixed-point code.
When a TrueType font is declared resident (with a psFont command),
  don't munge the encoding.
Look for URIs starting with "www." and treat them as absolute "http:"
  URIs, not as relative URIs (to match Adobe's behavior).
Added code to FoFiTrueType to check for a zero-entry cmap table.
Tweaked the font substitution code to do a better job of scaling the
  substituted font.
Require at least two splits in the axial shading color bisection.
Optimized JBIG2Stream::readGenericBitmap().
JPXStream wasn't correctly handling row padding for images with fewer
  than 8 bits per component.
Optimized the ToUnicode CMap parser.
Added a "whole words only" option to text searches.
Check for valid component parameters in the DCT decoder.
Implement embedding of external 16-bit fonts (without subsetting) in
  PostScript output.
Added the minLineWidth xpdfrc command.
Added warning messages for font substitutions.

3.04 (2014-may-28)
------------------
New text extractor.
Added the pdftohtml tool.
Added the pdftopng tool.
New trapezoid-based rasterizer core (for performance).
Generate appearance streams for Line, PolyLine, and Polygon
  annotations.
Added the closeWindowOrQuit command, and changed the default binding
  for ctrl-W from closeWindow to closeWindowOrQuit.
Implemented the new AES-256 mode (R=6, Acrobat X).
Add an object cache.
Added a small cache for object streams.
Modify PSOutputDev to use LZW compression instead of RLE, with a
  fallback to RLE if the "psLZW no" setting is given.
Pdfinfo now prints page rotation info.
Modified ImageOutputDev, used by pdfimages, to output the masks and
  soft masks used when drawing images.
Remove non-printable characters from error output, just in case they
  might cause problems for the terminal program.
Added initial support for Code3of9 bar codes in XFA forms.
Added the mapExtTrueTypeFontsViaUnicode xpdfrc command.
Apply stroke adjustment to rectangular images and clipping regions (in
  addition to strokes and fills).
Decode JPEG 2000 images at less than full resolution if the full res
  image isn't needed (i.e., if the raw image is higher resolution than
  the output). 
Implemented knockout groups.
Removed t1lib support.
Added support for images with 16-bit components.
Rewrote the Dict class to use a hash table; as a side effect, this
  handles dictionaries with multiple definitions for a key, which are
  in violation of the spec, but Acrobat appears to handle.
The transformed line width computation -- used to implement the
  minLineWidth setting, and the hairline threshold in monochrome mode --
  was incorrect.
Pdftops was not correctly handling the case where it couldn't find
  a 16-bit font -- this led to crashes and/or invalid PostScript.
A bug in FlateStream::getBlock() was causing problems with narrow
  images.
Use the correct _WIN32 define instead of WIN32.
Use copy-on-write for the clip path in SplashState (when doing gsave),
  for performance.
Added a Solaris-specific entry to the ghostscript font search path.
SplashState was initializing line width to 0 instead of 1.
Abort processing on a content stream after getting 500 errors
  (undefined operator, wrong number of args) -- this avoids very long
  processing time for malicious PDF files using bogus RLE encoded
  content streams.
Added the psUseCropBoxAsPage xpdfrc option; "pdftops -pagecrop" now
  sets psUseCropBoxAsPage; "pdftops -pagecrop -paper match" now uses
  the CropBox as the page size.
Re-architected the AcroForm support code into a separate AcroForm
  module.
Fixed the handling of overprinting/transparency interaction, using
  the CompatibleOverprint blend mode.
The TIFF predictor code for the 1-bit-per-pixel case was broken.
For triangle and patch mesh shadings (types 4-7) with color functions,
  interpolate the function parameter not the color.
Check the fontFile/fontDir commands before (instead of after) doing
  Base-14 substitution in PS output.
Correctly handle non-embedded TrueType fonts that have an Identity
  ToUnicode mapping (display and PS output were failing).
Added support for XFA form rendering, including an "enableXFA" xpdfrc
  setting.
Handle PFB Type 1 fonts when generating PostScript output.
Unwind any extraneous saved graphics state at the end of the page
  (before drawing annotations).
Added some integer overflow checks in the GString class.
Handle 16-bit components in JPEG 2000 images.
ActualText spans can end without a valid font, in which case
  TextPage::beginWord was crashing.
The Domain entry in function shadings wasn't being parsed correctly.
Fixed a bug in the JPEG decoder - successive approximation
  (progressive mode) coefficients weren't being handled correctly.
Added a better infinite loop test to the xref parser.
When generating PostScript, merge reused TrueType fonts (if their
  code-to-GID mappings are the same).
Tweak the Gouraud triangle shaded fill code to end the recursive
  splitting if the triangles get sufficiently small.
Do bilinear interpolation when upsampling images.
When skipping extraneous image data from an inline image, look for
  EI<whitespace> instead of just EI.
When writing to stdout on Windows, pdftoppm now sets the file mode to
  binary.  [Thanks to Robert Frunzke.]
Accept strings as well as names for the BaseFont entry in font
  objects.
Removed the TEXTOUT_WORD_LIST config option (with the new text
  extractor, this is always enabled).
Fixed a bug in the JBIG2 decoder (the TPGD context for template #3 in
  readGenericBitmap was incorrect).
Rewrote the PostScriptFunction code for performance.
Handle 8-bit OpenType CFF fonts that are missing required tables in
  the OpenType wrapper.
Handle tiling patterns with reversed coordinates in their bounding
  boxes.
Added support for 64-bit file offsets, i.e., PDF files larger than
  2GB.
Optimize the code that rasterizes pattern-filled image masks.
Added support for Mac OS X system fonts (Base-14 only).
The backdrop color in luminosity-type soft mask groups was not being
  handled correctly.
Modified behavior of "pdftops -paper match -duplex ..." - it will now
  duplex consecutive same-sized pages.
Tweak the handling of degenerate fills ('moveto lineto fill') to
  match Adobe.
Don't honor the OPM=1 setting with ICCBased CMYK color spaces.
Whole-word searches were treating certain punctuation (Unicode number
  separators and terminators) as part of the word, e.g., searching for
  "foo" would not match "foo,".
Use the TextString class everywhere it makes sense.
Removed the unnecessary segment sort in Splash (performance
  optimization).
Handle hyperlinks that use Widget-type annotations.
Fix up the integer overflow checks to avoid issues with clever
  compilers.  [Thanks to Nickolai Zeldovich.]
Correctly handle streams with missing Length entries in damaged PDF
  files.
Added a compile-time option (LOAD_FONTS_FROM_MEM) to load fonts from
  memory rather than temporary files on disk.
Added the psRasterSliceSize xpdfrc option.
Fixed a case in the JPEG 2000 arithmetic decoder where extra data is
  present in packet i, and needs to be saved for use in packet i+1.
Fixed a bug in the JPEG 2000 decoder related to images with fewer than
  8 bits per component.
Handle the case in PSOutputDev where slice size overflows a 32-bit
  integer.
Add (partial) support for TrueType cmap format 2.
Always pass FT_LOAD_NO_BITMAP to FreeType -- bitmaps apparently fail
  with rotated characters.
Support fonts specified in ExtGState dictionaries.
Annotations with empty Border arrays should not draw a border.
Fix the CMap parser to handle large CID ranges.
Check for Type 3 CharProcs that call q or Q before the d0/d1 operator,
  and treat them as uncacheable.
Invert the selection color when starting in reverse video mode.
Device{Gray,RGB,CMYK} cannot be mapped via a resource dict.
Changed the PS output for masked images (explicit and color key
  masking): use a plain old clip path instead of rectclip to avoid
  array overflows.
Check the StemSnapH/V arrays when converting Type 1C fonts to Type 1 -
  if there are any duplicate or out-of-order values, skip that
  StemSnapH/V array.
Added the psMinLineWidth xpdfrc setting.
Fix an obscure issue in converting TrueType fonts to Type 42, related
  to empty glyph descriptions (12 zero bytes).
Pdftops now reports an error if there were any I/O errors writing to
  the PS output file.
Fix vertical text (CJK fonts) in PS output -- offset the character
  origin correctly.
Increased the number of digits used by pdfimages for the image number
  from three to four.
Handle right-to-left (e.g., Arabic) ligatures correctly in the text
  extractor.
Added the -loc and -locPS options to pdffonts.
Extend the object parser recursion limit to cover Stream::addFilters()
  / Stream::makeFilters() - to avoid another possibility of stack
  overflow.
Disable FreeType autohinting, because it can fail badly with font
  subsets that use invalid glyph names -- except in the case of Type 1
  fonts, which look much better with light autohinting.
Modified the rasterizer pipeline functions to process a scan line at a
  time (for performance).
Removed VMS build support (it hasn't been updated in ages).
Removed pdftotext's '-htmlmeta' option (use pdftohtml instead).
PSOutputDev's font/form setup code, and pdffonts, were not scanning
  soft mask groups in ExtGState dictionaries.
Invalid DCT input (e.g., from a damaged PDF file) could overflow the
  dctClip array.
When upsampling an image mask or image with a large resulting image
  size, do it in stream mode instead of prescaling the whole image
  (to avoid running out of memory).
Added infinite loop detection to pdffonts.

4.00 (2017-aug-10)
------------------
Complete rewrite of the xpdf GUI, using Qt instead of Motif.
Multithreaded rasterization in the viewer - pages are now rasterized
  in a separate thread so that scrolling and other UI activity is not
  blocked.
Added a linear text selection mode.
Limit transparency groups to the clip rectangle (performance
  optimization).
Optimized the SplashScreen code, used in 1-bit monochrome mode.
Added setmode calls to pdftopng, when writing to stdout on Windows.
  [Thanks to Robert Schroll.]
Regenerate the appearance stream for an AcroForm field if there is
  no appearance stream, even if NeedAppearances isn't set.
When regenerating AcroForm field appearance streams, use a default
  font (Helvetica) for fields that don't have a valid font.
When the line width is increased by the minLineWidth setting, force
  the line join mode to "bevel" to avoid "whiskers" at sharp corners.
Change the pdftoppm/pdftopng resolution (-r) argument from an integer
  to floating point.
Use the FontDescriptor 'CapHeight' value in place of 'Ascent' if it's
  available.
OC (optional content) entries in image XObjects were being ignored.
Added support for preblended soft-masked images.
Added optional support for using libjpeg to decode DCT (JPEG)
  streams.
Transparency groups weren't being composited correctly in mono1 mode.
Switched to a different IDCT transform in the DCT (JPEG) decoder, to
  get better accuracy; the new transform is also a bit faster.
Modified the polygon scan converter to avoid O(n^2) performance, which
  can get really bad with paths that have extremely large numbers of
  segments.
Added the maxTileWidth, maxTileHeight, tileCacheSize, and
  workerThreads xpdfrc settings.
Modified PSOutputDev so it doesn't output resources (fonts, etc.) for
  pages that are rasterized (because they use transparency).
Added the -alpha flag to pdftopng.
Handle TrueType fonts with out-of-bounds loca entries.
Optimize consectutive "q" (gsave) operations in PostScript output.
Various improvements to the XFA rendering code.
Added the -nodiag flag to pdftotext.
Switched to cmake instead of autoconf.
Look for Widget-type annotations that aren't attached to the
  AcroForm, and add them to the AcroForm.
Added the "-z" option to pdftohtml.
The JPEG 2000 decoder now treats invalid boxes after the image
  codestream as non-fatal errors.
Improved the handling of drop caps in pdftohtml.
Added the "psNeverRasterize" setting.
Pdftohtml now converts invisible PDF text to transparent HTML text.
Check for zero-width/height bitmaps in the JBIG2 decoder -- these can
  happen in corrupted JBIG2 streams.
Pdfimages was inverting 1-bit monochrome images.
Added CCITTFaxStream::getBlock() to speed up the CCITTFax decoder.
Added resolution info to PNG files generated by pdftopng.
The DCT decoder now ignores non-Adobe APP14 markers (rather than
  generating an error).
Regenerate appearance streams for FreeText annotations.
The TextString class now handles UTF-16LE in addition to UTF-16BE.
  (UTF-16LE isn't allowed by the PDF spec, but I've seen it used.)
Added the simple one-column text extraction mode (pdftotext -simple).
Added a -cmyk option to pdftoppm to write CMYK PAM files.
Modified pdfinfo to output "static XFA" or "dynamic XFA", rather than
  just "XFA".
Added the "drawFormFields" xpdfrc command.
Various performance optimizations in the rasterizer.
Fixed the tiling pattern code to avoid stripes between pattern cells,
  and to honor the TilingType flag.
Always split axial shadings into 256 slices.
Handle the case where an optional content block is left open at the
  end of a page content stream.
Accept code-to-CID-type CMaps as ToUnicode CMaps (to work around buggy
  PDF generators).
Unicode-to-unicode maps weren't working correctly with fonts that have
  an "Identity" encoding.
Modify the lexer to interpret "--123.4" as -123.4, "--123" as 0, and
  "123-45" as "123" to match Adobe's behavior.
The text extractor now reverses the order of side-by-side columns for
  right-to-left scripts.
Worked on right-to-left script support in pdftohtml (still not
  complete).
Switched the default display mode to continuous (from single page).
Added the "-bom" switch to pdftotext.
Share font objects when multiple font tags point to the same object.
The transfer function goes before alpha blending in the rasterizer
  pipeline.
Added the "-allinvisible" switch to pdftohtml.
Added overprint mode (OPM) support in Level 3 PostScript output.
Added support for DeviceN color spaces in Level 3 PostScript output.
Added the "-userunit" option to pdftops.
Added the "-raw" and "-list" options to pdfimages.
Pdfimages now writes PGM files (instead of PPM files) for DeviceGray
  and CalGray images.
Added grayscale PostScript output -- added the '-level2gray' and
  '-level3gray' switches to pdftops.
Fix up Type 1 fonts when embedding in PostScript.
Added the "problematic" column to pdffonts output.
Generate an appearance stream for signature fields in AcroForms.
Correctly handle line dash patterns with zero-length segments when the
  line cap is butt or project.
Added the "strokeAdjust cad" xpdfrc option; fixed some issues with
  stroke adjustment and projecting line caps.
Added support for Code128B bar codes in XFA forms.
Look at both the ON and OFF arrays in the default OCCD (optional
  content config dict), to work around certain broken PDF files.
Added support for XFA 'numericEdit' fields.
Added support for 'picture' formatting in XFA forms.
Added mouseClickN events (in addition to mousePressN and
  mouseReleaseN).
External CID OpenType CFF fonts should map through Unicode (similarly
  to external CID TrueType fonts).
Handle axial and radial shadings in SplashOutputDev, in device space.
Use the PDF 2.0 inline image length field.
Handle duplicate embedded Type 1 font names in PostScript output.
Handle the case of a stroked closed path with a dash pattern -- if the
  dash pattern is "on" at both the start and end of a subpath, it
  should be joined.
If the line dash phase is negative, add a multiple of 2x the total
  dash length.
Indexed color space indexes should be clipped to [0,hival].
Fix the handling of the text render mode with Type 3 fonts, in the
  rasterizer and in PostScript output.
CID font metrics shouldn't be sorted - the PDF 2.0 spec says that, in
  the case of duplicate entries, the first entry should be used.
PSOutputDev now converts tiling patterns to PostScript tiling patterns
  (in Level 2/3).
Fixed a security hole in SecurityHandler.cc (uninitialized variables).
  This vulnerability was discovered by Kushal Shah of Fortinet's
  FortiGuard Labs.
Fixed a security hole in Function.cc (write past end of array).
Fixed a security hole with the use of d0/d1 operators outside of a
  Type3 CharProc [CVE-2016-9027].

4.01 (2019-feb-18)
------------------
Added remote server mode back into xpdf.
Add support for Unicode file names for the command line tools on
  Windows.
Added the tabStateFile setting, the saveTabState/loadTabState
  commands, and the "-tabstate" switch to xpdf.  [Thanks to Christian
  Barthel for the suggestion.]
Added the defaultPrinter xpdfrc setting.
Removed the psFile xpdfrc option (should have been removed in the 4.00
  release).
Tweaked the TrueType encoding/cmap code again, to get closer to the
  PDF 2.0 spec, and to fix a problem (difference between Xpdf and
  Adobe) with a specific PDF file.
Optimized transparency group rasterization: only composite the part of
  the group bitmap that was modified.
If vector antialiasing is disabled, use the narrow stroke code for
  lines less than one pixel wide.
Do not map through Unicode for non-embedded CID TrueType fonts with
  encoding = Identity-H and char collection = Adobe-Identity -- this
  matches Adobe's behavior on a somewhat common case.
The CCITTFax decoder now aborts after 1000 error messages, avoiding
  problems with huge data expansion for badly corrupted CCITTFax
  streams.
The xref loop detection code was only looking at xref tables, and not
  xref streams.  (CVE-2018-7174)  [Thanks to skysider for the bug
  report.]
The JPX decoder wasn't checking to make sure the number of components
  is non-zero.  (CVE-2018-7175)  [Thanks to skysider for the bug
  report.]
Modify the lexer to accept leading '+' signs on numbers.
Pdftohtml wasn't setting the background image width/height attributes
  correctly for rotated pages.
Ignore color-setting operators in cached Type 3 characters.
Support color-key masking in Level3Gray PS output with preload.
Xpdf was crashing on zero-page PDF files.
Added the unicodeRemapping xpdfrc option.
Change the cursor when the mouse is over text (in linear selection
  mode).
Support external OpenType CFF fonts for PostScript output.
Handle choice-type AcroForm fields that have separate display values
  and export values.
Increased the supported PDF version from 1.7 to 2.0.  (This isn't a
  change in functionality.  The code was already in place -- I just
  forgot to bump the PDF version number.)
Added the dropFont xpdfrc option.
Added support for PDF417 barcodes in XFA forms.
Modified pdfinfo to look at both the Info dict and the XML metadata.
Check for invalid line cap/join values.  [Thanks to
  fish@360TeamSeri0us for the bug report.]
Modified the object stream cache to hold onto more object streams, if
  they're being used.
Don't look at the "DV" (default value) key in AcroForm fields -- that
  should only be used when a form is explicitly reset.
Accept 8-byte values in xref streams.
Two DCTStream bugs: don't allow SOF headers between progressive scans;
  check for invalid Huffman table indexes.  [Thanks to
  fish@360TeamSeri0us for the bug reports.]
Check for uses of the scn/SCN operators with no arguments.  [Thanks to
  fish@360TeamSeri0us for the bug report.]
Correctly handle indexed color spaces with empty lookup tables.
  [Thanks to fish@360TeamSeri0us for the bug report.]
Support large bitmaps (>4GB) on 64-bit systems.
Soft masks are always isolated.
When "undoing" preblended image/softmask data, clip the resulting
  color values to avoid problems with incorrect data.
Set the default text encoding to UCS-2 in Xpdf, so that copying to the
  clipboard works as expected.
Added a sanity check for JBIG2 symbol height.  (CVE-2018-7173)
  [Reported by skysider.]
Check for uninitialized value in JPXStream::fillReadBuf.
  (CVE-2018-7452)  [Thanks to skysider for the bug report.]
Don't try to load an XFAForm if the PDF file has zero pages.
  (CVE-2018-7454)  [Thanks to skysider for the bug report.]
Check for invalid line cap/join values.  (CVE-2018-16368)  [Thanks to
  fish@360TeamSeri0us for the bug report.]
If the page count is greater than 50k, rescan the page tree and count
  the pages.  This prevents long load times where various tools try to
  read pages 1 through n.  (CVE-2018-18651)  [Thanks to krace for the
  bug report.]
Handle a null font name in PSOutputDev::setupEmbeddedType1Font.
  [Thanks to r4xis for the bug report.]
Check for invalid quant table indexes in the DCT decoder.  [Thanks to
  r4xis for the bug report.]

4.01.01 (2019-mar-14)
---------------------
The PDFDoc(BaseStream) initializer wasn't working correctly.
Fixed a missing array bounds check in PSOutputDev.  [Thanks to
  Loginsoft for the bug report.]
If the "U" string used for RC4 decryption is short, Adobe apparently
  zero-pads it, so Xpdf now does the same.
Pdffonts now checks more carefully for loops between objects.
Fixed a problem parsing large real numbers.  [Thanks to Loginsoft for
  the bug report.]

4.02 (2019-sep-25)
------------------
Pdftohtml now extracts embedded fonts (TrueType and CFF only).
Added the margin settings (-marginl -marginr -margint -marginb) to
  pdftotext.
Various user interface tweaks:
  - added a toolbar button to toggle (show/hide) the sidebar
  - added view menu items to toggle (show/hide) the sidebar and
    toolbar
  - added the 'showToolbar', 'hideToolbar', 'toggleToolbar',
    'expandSidebar', and 'shrinkSidebar' commands
  - added the 'initialDisplayMode', 'initialToolbarState', and
    'initialSelectMode' xpdfrc settings
  - rearranged the xpdf toolbar
Implemented drag-and-drop, so that PDF files can be drag-and-dropped
  onto an already-open xpdf window.
Added the option to display page labels, rather than page numbers.
Implemented the missing 'openInNewWin' command.
Added the 'openFileIn', 'openFileAtDestIn', 'openFileAtPageIn', and
  'openIn' commands; removed the 'openInNewWin' command.
Added the '-open' switch to xpdf.
Added the reverseVideoInvertImages setting.
Page-up and page-down now "snap" to the nearest page, if it's within a
  few pixels.  This avoids annoying behavior when the window is a tiny
  bit too short or too tall for a page.
Properly handle overprint in non-isolated transparency groups.
Missing null check in Gfx::opSetExtGState().  [Thanks to
  pwd@360TeamSeri0us for the bug report.]
The DCT decoder doesn't handle a sampling factor of 3 -- check for
  this and report an error.  [Thanks for Agostino Sarubbo of Gentoo
  for the bug report.]
Check for images with a Pattern color space, and report an error.
  [Thanks to TeamSeri0us for the bug report.]
Check that the Width, Height, and BitsPerComponent are valid in image
  soft masks.  [Thanks to TeamSeri0us for the bug report.]
Check for zero page width/height in PSOutputDev.  [Thanks to
  TeamSeri0us for the bug report.]
Check for divide-by-zero in PostScript functions.  [Thanks to
  TeamSeri0us for the bug report.]
Properly handle overprint in shading pattern strokes.
The "save image" feature in Xpdf wasn't getting the user-specified
  page number correctly.
PostScript doesn't support progressive or non-interleaved DCT (JPEG)
  streams, so check for those and re-encode them in PS output.
Splash now caches the most recent scaled image, in case it is
  immediately reused -- this results in a significant speedup in
  certain cases.
Fixed a problem with parsing the TrueType loca table.  [Thanks to
  Pangu Lab for the bug report.]
Fixed a problem with int overflow on image bounds.  [Thanks to
  Pangu Lab for the bug report.]
Fixed a problem with TrueType font parsing where there is gibberish in
  the TrueType table directory.  [Thanks to Pangu Lab for the bug
  report.]
Fixed a problem with JPX image resolution reduction.  [Thanks to Pangu
  Lab for the bug report.]
Fixed a problem with non-isolated transparency groups in 1-bit
  monochrome mode.  [Thanks to Pangu Lab for the bug report.]
Fixed various bugs in FoFi.  [Thanks to Pangu Lab for the bug
  reports.]
Added a missing bounds check to Annot::setFillColor().  [Thanks to
  Pangu Lab for the bug report.]
Added a check on the DCT quant table selector.  [Thanks to Pangu Lab
  for the bug report.]
Fixed a problem with the Type 3 font cache running out of entries.
  [Thanks to Pangu Lab for the bug report.]
Fixed an integer overflow bug in SampledFunction.  [Thanks to Pangu
  Lab for the bug report.]
Fixed an integer overflow bug in the tiling pattern size.  [Thanks to
  Martin Muskens at Ergosoft for the bug report.]
Fixed a read-past-end-of-buffer in the Type 1 font parser.  [Thanks to
  Pangu Lab for the bug report.]
Fixed an int overflow bug in the JBIG2 decoder.  [Thanks to
  TeamSeri0us for the bug report.]
Added a missing bounds check to GfxPatchMeshShading::parse().  [Thanks
  to TeamSeri0us for the bug report.]
JPEG 2000 tile indexes were being computed incorrectly.  [Thanks to
  TeamSeri0us for the bug report.]
Large sample separation values in a JPX stream were resulting in
  zero-width/height tiles, which caused problems.  [Thanks to Pangu
  Lab for the bug report.]
The XFA parser now looks for "ancestor matches" when searching for
  data to fill a form field.
Fixed an uninitialized variable in BuiltinFontWidths::getWidth().
  [Thanks to Martin Muskens at Ergosoft for the bug report.]
If there are no popupMenuCmd instances, construct a popup menu with
  basic instructions pointing to 'popupMenuCmd'.
Ignore color operators in uncolored tiling patterns.  [Thanks to
  Martin Muskens at Ergosoft for the bug report.]
Pdftotext raw mode output looks for space characters.
Increased the width of the font name column in the pdffonts output.
Function objects weren't checking their input/output counts properly.
  [Thanks to Pangu Lab for the bug report.]
TextPage::findGaps() wasn't checking the x/y min/max values for int
  overflow.  [Thanks to Taolaw for the bug report.]

4.03 (2021-jan-28)
------------------
Implemented selection extension via shift-click, and word/line
  selection via double/triple click.
Added default bindings for ctrl-mousewheel-up/down to zoom in/out.
Added the "-nofonts" option to pdftohtml.
Added the "simple2" mode to pdftotext.
Added the "-rot" flag to xpdf, pdftoppm, and pdftopng.
Added the "-listencodings" flag to pdftotext.
Added the 'copyLinkTarget' command.
Added the 'selectionColor' xpdfrc setting.
Added the 'initialSidebarWidth' xpdfrc setting.
Added support for @"..." strings in xpdfrc files.  This includes using
  '%' as an escape character, and also the '${DATADIR}' variable.
Added a help menu item that shows all of the key bindings.
Reorganized the gradient shading rasterization code to avoid
  transparency artifacts between triangles/patches.
Use interpolation rather than subdivision to rasterize Gouraud
  triangle shadings.
Allow escaping (via the \x01 character) in command args, so that "xpdf
  -open foo(123).pdf" works correctly.
Extended the damaged file repair code to handle PDF files that use
  xref streams and object streams.
Modified pdfinfo to print the encryption algorithm used (if any).
Handle Windows shortcut (.lnk) files in Xpdf and in the command line
  tools.
Display an error dialog when trying to copy text from a protected
  file.
Updated all four of the CJK language support packages with the latest
  Adobe data.
Modified pdftohtml to draw 'invisible' text over non-horizontal words.
Catalog.pageLabels wasn't being properly initialized to NULL.  [Thanks
  to Dhiraj for the bug report.]
Added a sanity check for JBIG2 symbol width.  [Reported by Marc
  Schoenefeld.]
Fixed a bug in the fontconfig calls that was causing Xpdf to crash.
The Type 3 font cache code wasn't correctly handling the case where a
  Type 3 char refers to another char in the same T3 font.  [Thanks to
  Pangu Lab for the bug report.]
Xpdf was crashing if 'view page labels' was enabled without any
  document open.  [Thanks to TeamSeri0us for the bug report.]
The Type 1C-to-Type 1 font converter wasn't checking for
  divide-by-zero with rational numbers.  [Thanks to TeamSeri0us for
  the bug report.]
Fixed a bug in the TrueType font parser - zero-length loca tables
  weren't handled correctly.  [Thanks to TeamSeri0us for the bug
  report.]
Fixed an integer overflow bug in the transparency group setup code.
  [Thanks to TeamSeri0us for the bug report.]
Pdfinfo with the "-box" option was crashing on zero-page PDF files.
  [Thanks to TeamSeri0us for the bug report.]
The code that caches scaled images wasn't checking the rendering
  intent.  [Thanks to Martin Muskens at Ergosoft for the bug report.]
The JBIG2 decoder now checks for gibberish values in various segment
  headers, but keeps any data decoded prior to that.
Fixed two bugs in the FoFi code that handles CFF fonts.  [Thanks to
  dsmic for the bug report.]
Redesigned the image scaling code, for performance.
Cleaned up the code that sanity-checks font sizes to avoid trying to
  allocate too much memory for the font cache.
Implemented precincts in the JPEG 2000 decoder.
The page-up/down snapping code was calling TileMap::getPageTopY() with
  invalid page numbers.  [Thanks to dfandrich for the bug report.]
Added missing error-checking when parsing an annotation appearance
  stream's bbox.
Handled UTF-16 sequences in ToUnicode maps.
Rewrote the code that draws static XFA forms: combined it with the
  AcroForm code, to match Adobe's behavior.  Removed the enableXFA
  xpdfrc setting.
Check for indirect references in content streams and report an error.
Doing overprint preview in tiling patterns requires tracking the
  overprint mask at each pixel.
Check for "decompression bombs" in Flate and LZW streams.
The nextPageNoScroll and prevPageNoScroll commands weren't working
  correctly in continuous mode.
Disable stroke adjustment when drawing Type 3 characters.
The "xpdf -open" flag now constructs an absolute path, so it's not
  dependent on the current directory when xpdf was started.
Check for infinite loops in Type 1C charstring subroutines.  [Thanks
  to blbi for the bug report.]
Fixed an incomplete test for headless CFF files.  [Thanks to Chengbin
  for the bug report.]
Tweaked the code that computes segment slope in SplashXPath.cc to
  avoid problems with extremely small coordinate values.  [Thanks to
  Chengbin for the bug report.]
Check for an invalid segment length in PSOutputDev's PFB parse.
  [Thanks to Chengbin for the bug report.]
Check for JPEG 2000 segments that are only allowed in the first
  tile-part of a tile.  [Thanks to Chengbin for the bug report.]
Check for invalid AcroForm ListBox field top index.  [Thanks to
  Chengbin for the bug report.]
Check for invalid mesh shading parameters.  [Thanks to Chengbin for
  the bug report.]

4.04 (2022-apr-18)
------------------
When closing a file, save the current page number in ~/.xpdf.pages,
  and restore it next time the file is opened.  This can be disabled
  with "savePageNumbers no" in your xpdfrc file.
Allow the tab list to be reordered, using drag-and-drop.
Added a document information dialog, with metadata and fonts, to xpdf.
Pdftohtml now generates HTML links for URI links anchored on text.
Added the useTrueTypeUnicodeMapping xpdfrc setting.
Added the 'enableXFA' xpdfrc setting back: if set to 'no', xpdf will
  not read an XFA form, meaning all form info comes from the AcroForm.
Add support for long paths on Windows 10.
Added the "-formfields" option to pdftohtml.
Added the "-embedbackground" and "-embedfonts" options to pdftohtml.
Added the "-vstretch" option to pdftohtml.
Added the "-verbose" flag to pdfimages, pdftohtml, pdftopng, pdftoppm,
  pdftops, and pdftotext.
Added the showAttachmentsPane, showLayersPane, and showOutlinePane
  commands.
Added the 'openFile2' command to xpdf.
Added the showMenuBar, hideMenuBar, and toggleMenuBar commands to
  xpdf.
Rearrange file names in the tab list to "foo.pdf [/full/path/]", to
  improve the usability of the (narrow) tab list.
Added the 'imageMaskAntialias' xpdfrc setting.
Added the '-table' switch to pdftohtml.
Fixed a couple of progression order bugs in the JPEG 2000 decoder.
  [Thanks to shellway for the bug reports.]
Fixed a problem with subsampled pixel index computations in the JPEG
  2000 decoder.  [Thanks to shellway for the bug report.]
Fixed a couple of memory leaks triggered by fuzzed PDF files.  [Thanks
  to shellway for the bug report.]
Changed pdftohtml to generate spans with 'class=' instead of 'id=', so
  there aren't duplicate ids.  Also removed the unused id in the
  background img element.
Optimized SplashOutputDev::drawTilingPattern for the case where the
  tile is much larger than the area being drawn (i.e., the clipping
  bbox).  In this case, we can render just the needed portion of the
  tile.
Added a missing zero check for precinct size in the JPEG 2000 decoder.
  [Thanks to shellway for the bug report.]
Added a missing null check in the XFA form scanner.  [Thanks to Taolaw
  for the bug report.]
Deal with xref streams that include a free entry with gen=0xffffffff.
Fixed a problematic corner case in looking up XObject resources.
  [Thanks to shellway for the bug report.]
The unicodeRemapping config command wasn't correctly handling unsorted
  remapping files.
Improved handling of RTL text in the text extractor.
Extended the saveTabState/loadTabState commands to save/restore
  display mode, zoom, rotation, and scroll position for each tab.
Added support for Qt6.
Added a missing bounds check on stream DecodeParms arrays.  [Thanks to
  minipython for the bug report.]
Fixed an integer overflow check in XRef::readXRefTable.  [Thanks to
  yangshufan for the bug report.]
The builtin Latin1 encoding was mapping 'endash' instead of
  'softhyphen' to 0xad.  [Thanks to Jach Fong for the bug report.]
Fixed a bug in PSOutputDev::checkPageSlice() when built without
  SPLASH_CMYK.  [Thanks to irfanariq for the bug report.]
Added missing array length and type checks in Gfx::doForm().  [Thanks
  to shaohua for the bug report.]
Fixed an integer overflow security hole in the JBIG2 decoder.
Substitute Helvetica for undefined fonts and bad font objects.
Added an integer overflow check in JPXStream.  (JPXStream issue)
  [Thanks to Shin Ando @ Ricera Security for the bug report.]
The DCT (JPEG) decoder was allowing the 'interleaved' flag to be
  changed after the first scan of the image.  (CVE-2022-24106) [Thanks
  to Shin Ando @ Ricera Security for the bug report.]

4.05 (2024-feb-08)
------------------
Added the '-overwrite' option to pdftohtml.
Added the 'ignoreWrongSizeToUnicode' xpdfrc setting.
Added the loadSession and saveSession commands, and the 'Load last
  session' menu item.
Added code to automatically save and restore the xpdf session under
  control of a session manager.  This has not been thoroughly tested
  yet.
Added the zoomScaleFactor xpdfrc setting.
Added the zoomValues xpdfrc setting.
Added a 'smart case' option for search in xpdf.
Added the '-custom' flag to pdfinfo.
Added a color/gray/mono switch to the 'save image' dialog.
Added the separateRotatedText xpdfrc setting.
Added the '-meta' flag to pdftohtml.
Added the allowLinksToChangeZoom xpdfrc setting.
Added the 'uses JavaScript' output to pdfinfo.
Implemented pattern stroking of text.  Also fixed the various
  combinations of filling/stroking with color/pattern + clipping, some
  of which weren't being handled correctly.
Pdftops now (re)compresses any uncompressed or RLE-compressed images.
On an out-of-memory error, the command line tools now exit with an
  "out of memory" message, rather than an exception message.
Add code to pdfimages to extract images from tiling patterns.
Pdftops can now embed external 8-bit OpenType CFF fonts.
Fixed a corner case in the text extractor related to characters drawn
  at extremely large coordinates.  [Thanks to elvadisas for the bug
  report.]
Fixed an integer overflow in the transparency group code.  [Thanks to
  elvadisas for the bug report.]
Modify Annots::Annots() to skip annotations that have been turned into
  AcroFormFields -- invalid Widget-type annots will now be rendered as
  annots.
Added a missing integer overflow check in the JBIG2 decoder.  [Thanks
  to sangjun for the bug report.]
Added some sanity checks to the JBIG2 decoder.  [Thanks to sangjun and
  ycdxsb for the bug reports.]
Tiling patterns that use non-Normal blend modes can't be cached.
Fixed a bitmap size sanity check in the JBIG2 decoder.  [Thanks to Han
  Zheng (NCNIPC of China, Hexhive), for the bug report.]
Fixed a missing bounds check in FoFiType1C::convertToOpenType (used in
  pdftohtml).  [Thanks to cyth for the bug report.]
Fixed a use-after-free bug in pdftohtml.  [Thanks to FeRDNYC for the
  bug report.]
Merged aconf2.h into aconf.h; corrected the cmake config settings for
  paths; added the BASE14_FONT_DIR config option.  [Thanks to FeRDNYC
  for the suggestions.]
Fixed a missing check for a zero-length index in the CFF (Type1C) font
  parser.  [Thanks to Yuhang Huang (NCNIPC of China), Han Zheng
  (NCNIPC of China, Hexhive), Wanying Cao, Jiayu Zhao (NCNIPC of
  China) for the bug report.]
Add an object loop check to Catalog::countPageTree().
The DCT decoder wasn't checking for an SOF before the first SOS.
  [Thanks to cyth for the bug report.]
The inline image decoder was skipping to end-of-stream in the wrong
  stream object.  [Thanks to cyth for the bug report.]
Fixed a bug in the JPEG 2000 decoder when nLayers > 1 and the
  'termination on each coding pass' flag is set.
Removed the #pragma interface/implementation stuff (which is outdated
  and useless at this point).
Fixed a bug in the ICCBased color space parser that was allowing the
  number of components to be zero.  (CVE-2023-2662)  [Thanks to
  huckleberry for the bug report.]
Added checks for PDF object loops in AcroForm::scanField()
  (CVE-2018-7453, CVE-2018-16369, CVE-2022-36561, CVE-2022-41844),
  Catalog::readPageLabelTree2() (CVE-2023-2663), and
  Catalog::readEmbeddedFileTree() (CVE-2023-2664).
The zero-width character problem can also happen if the page size is
  very large -- that needs to be limited too, the same way as
  character position coordinates.  (CVE-2023-3044) [Thanks to jlinliu
  for the bug report.]
Add some missing bounds check code in DCTStream.  [Thanks to Jiahao
  Liu for the bug report.]
Fix a deadlock when an object stream's length field is contained in
  another object stream.  (CVE-2023-3436) [Thanks to Jiahao Liu for
  the bug report.]
Correctly handle tiling patterns with negative step values.
Ignore overprint in soft masks (to match Adobe's behavior).

4.06 (2025-nov-14)
------------------
Added the reverseVideoMode, normalVideoMode, and toggleVideoMode
  commands; added the view -> reverse video menu item.
Added a '%t' escape to include the currently selected text in the
  argument to xpdf's 'run' command.
Added the '-listonly' flag to pdfimages.
Changed the default from Level 2 to Level 3 PostScript.
Use the XDG config and state file directories on Linux. This means
  that ~/.config/xpdf/xpdfrc will be checked first, but ~/.xpdfrc will
  still be checked. The session and pages file will *only* be used if
  they are in ~/.local/state/xpdf/session and
  ~/.local/state/xpdf/pages. (XDG support can be disabled at compile
  time with 'cmake -DUSE_XDG=OFF'.)
Added the '-u' option to pdfimages.
Added the 'initialMaximized' xpdfrc setting.
Added the 'discardCoveredText' xpdfrc setting.
Added a file:close menu item to Xpdf.
Added the 'preferXFAFieldValues' xpdfrc setting.
Added the '-J' option to pdfimages to dump JPEG 2000 images.
Modified pdftohtml to generate a nicer index page; add the '-noframe'
  option to generate the previous-style index page.
Added support to pdftohtml for internal links (i.e., links to pages in
  the same document).
Tweaked the antialiasing code to make the output look a little
  lighter, and hopefully nicer.
The command line tools should print version info ('pdftotext -v' etc)
  to stdout, not stderr.
Added support for AIS (alpha is shape) for soft masked images drawn in
  knockout transparency groups.
Tweaked the code that determines a font's ascent metric, trying (yet
  again) to make it a little more robust to bogus values in the
  FontDescriptor.
On Linux systems (and anything else that uses fontconfig) look for the
  Base-14 fonts under the newer Nimbus names via fontconfig (in
  addition to checking for the older gs font names in 'standard'
  directories).
Pdftohtml now treats text drawn before a full-page fill as invisible.
Added Thai.unicodeRemap to the Thai language support packge: it maps
  old Microsoft private use area Thai diacritics to correct Unicode
  values.
Tweak the way invisible (OCR) text is handled in the output from
  pdftohtml.
Tweaked the appearance of the tab pane in the sidebar.
Fixed a missing bounds check (not exploitable) in
  GfxFont::readFontDescriptor(). [Thanks to Sangbin Kim for the bug
  report.]
Don't allow negative object or generation numbers in indirect
  references. (CVE-2024-2971) [Thanks to Song Jiaxuan (Huazhong
  University of Science and Technology) for the bug report.]
Extended the XRef/Parser object loop detector to catch loops that
  involve object streams. (CVE-2024-3247) [Thanks to Zhijie Zhang,
  from Institute of Information Engineering, Chinese Academy of
  Sciences for the bug report.]
Extended the Catalog::readFileAttachmentAnnots object loop detector to
  handle another case. (CVE-2024-3248) [Thanks to Wang Dawei and Zhou
  Geng, from Zhongguancun Laboratory for the bug report.]
Added a missing zero check to the size argument in
  UnicodeRemapping::map(). (CVE-2024-3900) [Thanks to Sangbin Kim,
  from Korea University Sejong campus for the bug report.]
Fixed a bounds check in FoFiType1::parse() that was being optimized
  away by modern compilers. (CVE-2024-4141) [Thanks to Wu JieCong for
  the bug report.]
If the XRefStm link in the trailer is invalid, just ignore it rather
  than triggering the repair code.
Extended the resource object loop detector in PSOutputDev to handle
  another case. (CVE-2024-4568) [Thanks to Ximing Fan, from School of
  Cyber Science and Engineering, Sichuan University, China for the bug
  report.]
Fixed a missing object type check that could lead to an out-of-bounds
  array write in Annots::loadFormFieldRefs(). (CVE-2024-4976) [Thanks
  to Vladislav Shevchenko (HSE university, Moscow) for the bug
  report.]
Increased the size of the inter-packet data buffer for the arithmetic
  decoder used by the JPX decoder.
Added another object loop check for patterns. (CVE-2024-7866) [Thanks
  to xiaobaozidi for the bug report.]
Check for unreasoanbly large page box coordinates, to avoid integer
  overflows. (CVE-2024-7867) [Thanks to xiaobaozidi for the bug
  report.]
DCTStream::getBlock() was missing a check for the case where
  DCTStream::prepare() failed due to invalid headers. (CVE-2024-7868)
  [Thanks to KMFL for the bug report.]
Added a check for the case where a stream has a large number of
  invalid filters, which was causing a stack overflow. [Thanks to
  Michael Lynch of mtlynch.io for the bug report.]
Fixed a bug in WebFont.cc that caused a read of one element past the
  end of an array. [Thanks to Mohammad Hussam Alzeyyat / mhzcyber for
  the bug report.]
Added a missing mutex to protect the Annots object when using
  multithreaded rendering in Xpdf.
Fixed incorrect integer overflow checking in
  PostScriptFunction::exec(), which led to an out-of-bounds array
  write. (CVE-2025-2574) [Thanks to Erik Viken for the bug report.]
Fixed the object loop check in AcroForm::scanField(). [Thanks to Erik
  Viken for the bug report.]
Fixed the object loop check in Catalog::readPageLabelTree2(). [Thanks
  to Erik Viken for the bug report.]
Added a missing bounds check in JBIG2Stream::readHalftoneRegionSeg().
  [Thanks to Erik Viken for the bug report.]
Added a missing parsed value check in
  GfxGouraudTriangleShading::parse(). (CVE-2025-3154) [Thanks to Erik
  Viken for the bug report.]
Added a cache for the tiling pattern tile, to handle the case where
  the same tiling pattern is used multiple times in different fill
  operations.
Ignore a bogus encoding for non-embedded Symbol and ZapfDingbats
  fonts.
Fixed an signed/unsigned conversion problem in Splash::fillChar().
  [Thanks to Erik Viken for the bug report.]
Fixed the object loop check in Catalog::countPageTree(). [Thanks to
  Gipoco for the bug report.]
Added some checking for the annotation matrix in Gfx::drawAnnot().
  [Thanks to Sofia Aberegg for the bug report.]
Removed Qt4 support from the cmake scripts. Xpdf has required Qt5/6
  for a while, but the cmake scripts weren't properly updated.
Added an object loop check for CMaps. (CVE-2025-11896) [Thanks
  to landw (GitHub: Landw-hub) for the bug report.]
Fixed two uninitialized fields in StandardSecurityHandler - this is
  not an exploitable bug. [Thanks to Aldo Ristori (GitHub: Kaldreic)
  for the bug report.]
Fixed an unitialized value bug in JBIG2Stream::readSymbolDictSeg -
  this is not an exploitable bug. [Thanks to Aldo Ristori (GitHub:
  Kaldreic) for the bug report.]
