From 2cf7d307639eab6a44ae8e355c68294a02532614 Mon Sep 17 00:00:00 2001
From: Jonas Jenwald <jonas.jenwald@gmail.com>
Date: Tue, 14 Jul 2026 14:31:26 +0200
Subject: [PATCH] Skip setFillColorN/setStrokeColorN operators without valid
 arguments (issue 21570)

The PDF document in question is corrupt, and note that even Adobe Reader (i.e. the PDF reference implementation) cannot render it correctly.

Also, guard all other set fill/stroke color operators similarly.
---
 src/core/evaluator.js       |  36 ++++++++++++++++++++++++++++++++++++
 test/pdfs/.gitignore        |   1 +
 test/pdfs/issue21570.pdf    | Bin 0 -> 5319 bytes
 test/test_manifest.json     |   7 +++++++
 test/unit/evaluator_spec.js |  28 ++++++++++++++++++++++++++++
 5 files changed, 72 insertions(+)
 create mode 100644 test/pdfs/issue21570.pdf

diff --git a/src/core/evaluator.js b/src/core/evaluator.js
index e0cb73d01..41a83644c 100644
--- a/src/core/evaluator.js
+++ b/src/core/evaluator.js
@@ -1991,40 +1991,64 @@ class PartialEvaluator {
             return;
           }
           case OPS.setFillColor:
+            if (!isNumberArray(args, null)) {
+              continue;
+            }
             cs = stateManager.state.fillColorSpace;
             args = [cs.getRgbHex(args, 0)];
             fn = OPS.setFillRGBColor;
             break;
           case OPS.setStrokeColor:
+            if (!isNumberArray(args, null)) {
+              continue;
+            }
             cs = stateManager.state.strokeColorSpace;
             args = [cs.getRgbHex(args, 0)];
             fn = OPS.setStrokeRGBColor;
             break;
           case OPS.setFillGray:
+            if (!isNumberArray(args, null)) {
+              continue;
+            }
             stateManager.state.fillColorSpace = ColorSpaceUtils.gray;
             args = [ColorSpaceUtils.gray.getRgbHex(args, 0)];
             fn = OPS.setFillRGBColor;
             break;
           case OPS.setStrokeGray:
+            if (!isNumberArray(args, null)) {
+              continue;
+            }
             stateManager.state.strokeColorSpace = ColorSpaceUtils.gray;
             args = [ColorSpaceUtils.gray.getRgbHex(args, 0)];
             fn = OPS.setStrokeRGBColor;
             break;
           case OPS.setFillCMYKColor:
+            if (!isNumberArray(args, null)) {
+              continue;
+            }
             stateManager.state.fillColorSpace = ColorSpaceUtils.cmyk;
             args = [ColorSpaceUtils.cmyk.getRgbHex(args, 0)];
             fn = OPS.setFillRGBColor;
             break;
           case OPS.setStrokeCMYKColor:
+            if (!isNumberArray(args, null)) {
+              continue;
+            }
             stateManager.state.strokeColorSpace = ColorSpaceUtils.cmyk;
             args = [ColorSpaceUtils.cmyk.getRgbHex(args, 0)];
             fn = OPS.setStrokeRGBColor;
             break;
           case OPS.setFillRGBColor:
+            if (!isNumberArray(args, null)) {
+              continue;
+            }
             stateManager.state.fillColorSpace = ColorSpaceUtils.rgb;
             args = [ColorSpaceUtils.rgb.getRgbHex(args, 0)];
             break;
           case OPS.setStrokeRGBColor:
+            if (!isNumberArray(args, null)) {
+              continue;
+            }
             stateManager.state.strokeColorSpace = ColorSpaceUtils.rgb;
             args = [ColorSpaceUtils.rgb.getRgbHex(args, 0)];
             break;
@@ -2041,6 +2065,9 @@ class PartialEvaluator {
               break;
             }
             if (cs.name === "Pattern") {
+              if (!Array.isArray(args)) {
+                continue;
+              }
               next(
                 self.handleColorN(
                   operatorList,
@@ -2058,6 +2085,9 @@ class PartialEvaluator {
               );
               return;
             }
+            if (!isNumberArray(args, null)) {
+              continue;
+            }
             args = [cs.getRgbHex(args, 0)];
             fn = OPS.setFillRGBColor;
             break;
@@ -2074,6 +2104,9 @@ class PartialEvaluator {
               break;
             }
             if (cs.name === "Pattern") {
+              if (!Array.isArray(args)) {
+                continue;
+              }
               next(
                 self.handleColorN(
                   operatorList,
@@ -2091,6 +2124,9 @@ class PartialEvaluator {
               );
               return;
             }
+            if (!isNumberArray(args, null)) {
+              continue;
+            }
             args = [cs.getRgbHex(args, 0)];
             fn = OPS.setStrokeRGBColor;
             break;
diff --git a/test/pdfs/.gitignore b/test/pdfs/.gitignore
index 54d04c8cf..7cd2904ed 100644
--- a/test/pdfs/.gitignore
+++ b/test/pdfs/.gitignore
@@ -103,6 +103,7 @@
 !issue9713.pdf
 !xfa_filled_imm1344e.pdf
 !issue8424.pdf
+!issue21570.pdf
 !issue8480.pdf
 !bug1650302_reduced.pdf
 !issue18816.pdf
diff --git a/test/pdfs/issue21570.pdf b/test/pdfs/issue21570.pdf
new file mode 100644
index 0000000000000000000000000000000000000000..6c1179975a08f81e888cab7ab29964e9ca6b5d04
GIT binary patch
literal 5319
zcmd^Dd0Z3M79I!?7{P){ty>*~h#Q$ClU;&BA_z7JB(g|dLNbBWY$gMV=zH!P)naW$
zi(0GVQtO6R>r(4pcLl9W_0@{IwJuakwWaXxoh*Q9pY8j-|K22%+&T9<_nvd^x!<`-
zbh;ubmdoa&(T7$ZT7_~k4ra-J2aStEakYUml34G?CL|rvAO#572gT(!QbSp6v@{8^
zAtZRokpx76U<emsyKf9p1GyF{1aceDbpXwDn?+ZoC0(i+2n7^`KtT*{!ZWbJVpeD<
zFsDMw<M4zW5tq-E@I-{5A4d|y;lu!((xQ76L~YYpt)vdalQc#<iN?pHq*(`@;<a>c
zyp_aoB}r*?8cKuVs-k>~7Ud}4Lh-jqa{*O|ak+dk)VEW>Z4(+d&}r3Z$C4D5PZk)=
zvX~gmpp(U93zQtCRZbQfhLqSyRY{s!TQXKF(ZvjmN8_AQr^#vp(_l`M(QKDGWh@Oa
zhLnOf6yq#+hfSxKu?i{5D#dY!!@+hCY>TY`=Sn0JoWsL;yjXyUwU0Mb8fUE89_7)~
zX}xOJBAby`(rIzhNSa79WyiT}u6GV#iWh9QvuQ)vT8jyHYODarX$e#+|1;EN@}jLR
zOm8(T=m5hKErA*kv6gOX3<eWzGr($avmH0+TEd+#!Od3E?twc!@OTshR~(3sG*gk}
zdh$vXq+M$>SSgTO7({6DEk%@!#cGDpP@Psv!F+Em_KuQZq<nk4y+#9EM5$3@E|9UD
zu{u((DKb*5_;gJH8HdAJjRs$JSC7xgak#H7E@%r^nn$DEZqd`qNeo0)>e+cRRtAL$
z*<v=qqUG*=B4g3}goXdrF+mnd-8`VSSd2j5Mw0Rb1qM=$&BfHDwoqZyIADUhfh63r
zG8Wv^u^dq>m#^kZq&$(7-q=zO#{~sj+n^u+*P!lw`zr9?@kyzaDlFO}xNA}rGFDNM
zK_|@@=>;6URv$}>32`i6ED^-!>vf!1zE;bT2!(tukIbiy2g+Hb%?^?b>T*4@Ou#$_
zn0j)f#%`CfJelFP%eAa@&c@+hrU0zrB^sbFi*Z0E0WCKTx!H{HVKX^kGNYvca4pC?
zJH`iqOcYPkn81U;_24Bu$c33LxKZdc+F&P@tfIiep|~mmqijX6p~N_B4iCk(8nD_N
zP!AGZ-w7!yOi$A-z-a7aF+9y;CYz~O<Q_f`*hW#L&5Yp+ve=*{Gm{fXdiYuVXP{)8
zX1o_A`7@MUnLE^r;<l<}E@mH={|>38fEOOFPceZ&p?J1I2g#l%M)4t}p`eg*wdr2k
z8JF`4QftwXSRNR8WOIpd1rkp(7=c@$<`_Z5T*wxc!@2ZfSydQ<g&qpcA9E`pt(Kpb
z{M{9EX#d{zesgLaS>eU=+fDDxuQ-1%O)H*v{}giw6FdEs8uj}R+53LIFsY_Vz>Ih^
z;}hQ`;CgDBi0g?W*Ecb8{-)=N2FjjJ+T<3K6|AC}!a!u?7Nf<c0`(7+P4CiydJGqv
z4mL<NPuX;5o+l;>x!NZpO_!UlBjKq@DM^T*pC2*?ypX1=;4I<q=Lg^JixJ3xS5QCz
zBaj)yWWqZ*q)kY0FdEEcqG2f7CKO!EkhZUdg|>xlI0#gSTHqZT%nXKzzjrn5M<Rle
z$;f1e9}Dr1@MA>yH62E}BZyxhuofEZzWn?d0f9llB(x0xY!3(KGZ_BB*ua1Qfc^*Q
zM*<=O+x6fk1hvo5Fj?a|@TR=KA~-6s>Of>>&6A!)zHMp<`g+GVI(3fj71O&<U%o&n
z5=*3V#o(mmAt|XU_3*6hoZJywKph2zhIi~#QL)20zGT|;88c_io>RKugAW&$FIxOj
z#mZHctJkbu_v!kr+dkjE<BOfUb{{-+_{i5sj~zd8?)*0wE?&C)?UmXaH*ej(bNAl;
zAL@R3`t0ZWU!K4C75e3eFkEhVJ$uQo2;i4LSc3p2^vloR0d7V_KwuAUP`iW-re<7w
z7H>*$hs5_+R2>M3A~K&u=G$t}*L(77qwAn+v}b?Kv8n%+XI{se{knpLGW@{eF(QzG
zNaLh?D@&2y|HpUJw|~GMaHGPLu~<xa>4W2z(LVub;)LY{78M($0{7mQTg((ZUt(N$
zWyvJ%mLi)Llo~E1d%y+>X0rtXAgzN(C8;xL5-m<F56&Rw^Vl5v!UPh5y9sDjZ8Ml&
z1!^uU^i<FRXlx6Hf{*EPl@)WF0^0?c+YtDmHH{yO!Ab%QgSeKIMq}LqSb1m!t>6~I
zLIcSi_m)TuPMECHV6cqRWz}2fKo5i_fp|d_Y`f{0R!T7ezNRUgR%_v!w;E#2MGeN<
z<F1EnT~ofg0ObxXTfzzd>S@1;qe6~uuDf|<qk8+S)X%z>tSecUY08fLR(M6;^v{CO
zp2hx##4*!W&KUGHW8%{%b7hN<%)0HUe>x-f(V|J0*T2{|`t_-8`u#AkX4IX~;Qd(-
z@(&4*$m=HGtzXXG)W$Hqe8}*y$f*l1hYy&#NftT!(PjI@&*M8sr#m^=)Q(Bq%7nnE
z)om1cwO`hp+q&q2y=vXU#~n*w3;tJLjbU5X^*VNBm)O%&j++Y~nn~TMq_=Nv*{knG
zTtICbEA%s$$d-(Zs5>r;{<yTEyr`zl#qXY3KhZP$31)V9%-dS~xP-NWx9o^!$(adj
z;;WL;O+yon&dJ6o>T~S-Zj2R6=kH%NYw>}J*MqFd;W2~kkyLe`eW@>y)N${sXE(&A
zbsu=>qZ6Iv+pbAF?)>S@fFNFu*&rX@?yGSptfVz&Plq9oDi^F@wEVhS_Wbm^gwigL
zSV8ySopA2Q;vQ`mU#%6ySAE&^_K^BTed<HXM*sLgbl`GX?LYT^oLpgEb}@>0_WX{z
zp-<8BwiB|$j!C<83#;7<j!e5#PKWpCns}`1%7Ct;j%`*{XGES{!r8F>!Plqyw%=nu
zwZT^W`_FyTu3oErv13ze!_6>x?$4X+7Eagq?m7DO;o%RJ%$c+IzGq%orU)rr5-#do
zJ$6FpLr>Znhn^++R~{T-PR+^c71T>tTz280&9eQ-!O*!k502e<w)Fi*(TDQjac?wy
zhmINfi8cO`|Na{dc#UdANyUu~7iV^fUUucKqqbW2{L!Nkn<ROat5TC!DkiMHb}tKg
z;CMGWQoK3wQPJHkowpshKIn_1j}Pvu6tNx3N%eUfx>U_yJ2iu8*?IJX<stRewmqu;
zYZhkhUly5F+0gfPLAUbj&+3S!?N2=9#_{B3Wtrx)l6GZhmOp2m9X>H-dAIuN)pOIT
z#2uuoc2$2ElzS_tp}(r#()h+*o%l18_4n$=jmjzLI_Kz?X-R`(mLC3yzi$6L5$9rq
zu;9ljRp(-hM+U4~N0lF33#OVDlCv#Gfi<>WTeiG*>HK9{r*7t(-J=KG?K<at{%a#s
z+LmWElIibtnycKD9+NVKJ@4qH<nX??v-@<f4D5eqW8jU))?c4@Iup|G_@&g}(@tL6
zTmEdswY#6bdG@Q-jq}#rt^Ov?aevsD*+)+Q*1p_$a&D>Ox9;Dsj7i&irc$y%7ZsMg
zdA=^WYDV_kjOvQA;qMLInDJCqCAwNYzi!8`bB7JR9hG}AU|IIq9nW``S5*D7?`F)c
zraO&;*YCaEs5|*fuP4?0Z<ebjDtGUmavpx>g3pQ>xqHNMXSbAuN+0U$(;FC$+n*tS
z!0DcoyhP0RaJq-)Axo*flx|1yp$45DL-SBBq~uH#@UPrb1c-`D|6ik3fxkMyiCvL|
z;cC)JVK{vxPIQ0EM?yAp{~Bq*OwB^4jntzYj4MH1R1ZHfp+G<gFg@m#!3sk6n7uL{
z0la7}<MM?*GQL0z4&$wHe4!XP(^|$A@IeS(k_idG|1Zl#K67xvpHMI32#(lSS0n&u
z@t4Mvh{0jJwT#E%_}~bR&}TeC!147>AoP(DJfZJ+{FZT{Y#M`+w9z$EWhf!RdSED?
zV%A$QFdD3YnHCF$!JiGFoua_<us9))5DA5Z09XdTghHN9C?LcHL5O)ef)82}LI7ku
v(90({PzF#0!2xpE;1gV6mq5si|6dM8=bN3<*eE)&_#zM?G&*|luq5=~XP?I(

literal 0
HcmV?d00001

diff --git a/test/test_manifest.json b/test/test_manifest.json
index b64418498..02eb0efd2 100644
--- a/test/test_manifest.json
+++ b/test/test_manifest.json
@@ -13059,6 +13059,13 @@
       }
     }
   },
+  {
+    "id": "issue21570",
+    "file": "pdfs/issue21570.pdf",
+    "md5": "3065e65224901203e708e3dacad2d99a",
+    "rounds": 1,
+    "type": "eq"
+  },
   {
     "id": "issue2856",
     "file": "pdfs/issue2856.pdf",
diff --git a/test/unit/evaluator_spec.js b/test/unit/evaluator_spec.js
index fa2c0c202..90ad3ec00 100644
--- a/test/unit/evaluator_spec.js
+++ b/test/unit/evaluator_spec.js
@@ -17,6 +17,7 @@ import { createIdFactory, XRefMock } from "./test_utils.js";
 import { Dict, Name } from "../../src/core/primitives.js";
 import { FormatError, OPS } from "../../src/shared/util.js";
 import { Stream, StringStream } from "../../src/core/stream.js";
+import { GlobalColorSpaceCache } from "../../src/core/image_utils.js";
 import { OperatorList } from "../../src/core/operator_list.js";
 import { PartialEvaluator } from "../../src/core/evaluator.js";
 import { WorkerTask } from "../../src/core/worker.js";
@@ -57,6 +58,7 @@ describe("evaluator", function () {
       handler: new HandlerMock(),
       pageIndex: 0,
       idFactory: createIdFactory(/* pageIndex = */ 0),
+      globalColorSpaceCache: new GlobalColorSpaceCache(),
     });
   });
 
@@ -358,6 +360,32 @@ describe("evaluator", function () {
       expect(result.fnArray).toEqual([]);
     });
 
+    it("should skip empty set fill/stroke color operators", async function () {
+      const colorOps = [
+        "SC",
+        "SCN",
+        "sc",
+        "scn",
+        "G",
+        "g",
+        "RG",
+        "rg",
+        "K",
+        "k",
+      ];
+
+      for (const op of colorOps) {
+        const stream = new StringStream(`/DeviceRGB CS /DeviceRGB cs ${op}`);
+        const result = await runOperatorListCheck(
+          partialEvaluator,
+          stream,
+          new ResourcesMock()
+        );
+        expect(result.argsArray).toEqual([]);
+        expect(result.fnArray).toEqual([]);
+      }
+    });
+
     it("should handle invalid dash stuff", async function () {
       const stream = new StringStream("[ none ] 0 d");
       const result = await runOperatorListCheck(