svn commit: r1927436 - pdfbox/branches/2.0/pdfbox/src/main/java/org/apache/pdfbox/pdfparser

[tilman]

Author: tilman
Date: Wed Jul 23 11:21:20 2025
New Revision: 1927436

Log:
PDFBOX-6037: avoid OOM, as suggested by David Justamante and Michael Klink

Modified:
   
pdfbox/branches/2.0/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFXrefStreamParser.java

Modified: 
pdfbox/branches/2.0/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFXrefStreamParser.java
==============================================================================
--- 
pdfbox/branches/2.0/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFXrefStreamParser.java
       Wed Jul 23 11:21:16 2025        (r1927435)
+++ 
pdfbox/branches/2.0/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFXrefStreamParser.java
       Wed Jul 23 11:21:20 2025        (r1927436)
@@ -87,6 +87,11 @@ public class PDFXrefStreamParser extends
         {
             throw new IOException("Incorrect /W array in XRef: " + 
Arrays.toString(w));
         }
+        if (w[0] + w[1] + w[2] > 20)
+        {
+            // PDFBOX-6037
+            throw new IOException("Incorrect /W array in XRef: " + 
Arrays.toString(w));
+        }
 
         COSArray indexArray = stream.getCOSArray(COSName.INDEX);
         if (indexArray == null)