svn commit: r1927420 - pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/pfb

[tilman]

Author: tilman
Date: Wed Jul 23 08:27:43 2025
New Revision: 1927420

Log:
PDFBOX-6044: avoid potential OOM

Modified:
   pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/pfb/PfbParser.java

Modified: 
pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/pfb/PfbParser.java
==============================================================================
--- pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/pfb/PfbParser.java    
Wed Jul 23 08:27:39 2025        (r1927419)
+++ pdfbox/trunk/fontbox/src/main/java/org/apache/fontbox/pfb/PfbParser.java    
Wed Jul 23 08:27:43 2025        (r1927420)
@@ -127,7 +127,7 @@ public class PfbParser
         List<Integer> typeList = new ArrayList<>(3);
         List<byte[]> barrList = new ArrayList<>(3);
         ByteArrayInputStream in = new ByteArrayInputStream(pfb);
-        int total = 0;
+        long total = 0;
         do
         {
             int r = in.read();
@@ -174,8 +174,13 @@ public class PfbParser
         // We now have ASCII and binary segments. Lets arrange these so that 
the ASCII segments
         // come first, then the binary segments, then the last ASCII segment 
if it is
         // 0000... cleartomark
-        
-        pfbdata = new byte[total];
+
+        if (total > pfb.length)
+        {
+            // PDFBOX-6044: avoid potential OOM
+            throw new IOException("total record size " + total + " would be 
larger than the input");
+        }
+        pfbdata = new byte[(int) total];
         byte[] cleartomarkSegment = null;
         int dstPos = 0;