From 848b8990157847b7c9fa160aeb2c7e630f295e3e Mon Sep 17 00:00:00 2001
From: Zdenek Dohnal <zdohnal@redhat.com>
Date: Thu, 11 Jan 2024 17:29:36 +0100
Subject: [PATCH] ppd-ipp.c: Fix crash if ppd_size is NULL

In some cases `ppd_size` can be NULL after `ppdPageSize()` - in such
cases a program using libppd will crash because the pointer is accessed
later.

Fixes #31
---
 ppd/ppd-ipp.c | 26 ++++++++++++++------------
 1 file changed, 14 insertions(+), 12 deletions(-)

diff --git a/ppd/ppd-ipp.c b/ppd/ppd-ipp.c
index f157e201..174336a0 100644
--- a/ppd/ppd-ipp.c
+++ b/ppd/ppd-ipp.c
@@ -439,24 +439,26 @@ ppdLoadAttributes(
         break;
       }
     }
-  }
 
-  //
-  // Try to find one with the same size...
-  //
+    //
+    // Try to find one with the same size...
+    //
 
-  if (!default_size)
-    for (i = 0, pwg_size = pc->sizes; i < pc->num_sizes; i ++, pwg_size ++)
+    if (!default_size)
     {
-      if (_PPD_PWG_EQUIVALENT(PWG_FROM_POINTS(ppd_size->width),
-			      pwg_size->width) &&
-	  _PPD_PWG_EQUIVALENT(PWG_FROM_POINTS(ppd_size->length),
-			      pwg_size->length))
+      for (i = 0, pwg_size = pc->sizes; i < pc->num_sizes; i ++, pwg_size ++)
       {
-        default_size = pwg_size;
-        break;
+	if (_PPD_PWG_EQUIVALENT(PWG_FROM_POINTS(ppd_size->width),
+				pwg_size->width) &&
+	    _PPD_PWG_EQUIVALENT(PWG_FROM_POINTS(ppd_size->length),
+				pwg_size->length))
+	{
+	  default_size = pwg_size;
+	  break;
+	}
       }
     }
+ }
 
   //
   // Default to A4 or Letter...