[
https://issues.apache.org/jira/browse/PDFBOX-6266?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18115511#comment-18115511
]
ASF subversion and git services commented on PDFBOX-6266:
---------------------------------------------------------
Commit 1938233 from Tilman Hausherr in branch 'pdfbox/branches/2.0'
[ https://svn.apache.org/r1938233 ]
PDFBOX-6266: avoid stack overflow with type 3 streams
> Secure against possible stack overflow with type 3 fonts
> --------------------------------------------------------
>
> Key: PDFBOX-6266
> URL: https://issues.apache.org/jira/browse/PDFBOX-6266
> Project: PDFBox
> Issue Type: Improvement
> Components: Rendering
> Affects Versions: 2.0.37, 3.0.8 PDFBox
> Reporter: Tilman Hausherr
> Assignee: Tilman Hausherr
> Priority: Minor
> Labels: StackOverflowError
> Fix For: 2.0.38, 3.0.9 PDFBox, 4.0.0
>
>
> As reported by [~tallison] from his 🤖 while working on TIKA-4891. I could
> reproduce it with a PoC:
> Caused by: java.lang.StackOverflowError: null
> java.base/java.lang.System.getProperty(System.java:830)
> org.apache.pdfbox.pdfparser.COSParser.init(COSParser.java:281)
> org.apache.pdfbox.pdfparser.COSParser.<init>(COSParser.java:276)
> org.apache.pdfbox.pdfparser.COSParser.<init>(COSParser.java:254)
> org.apache.pdfbox.pdfparser.COSParser.<init>(COSParser.java:238)
>
> org.apache.pdfbox.pdfparser.PDFStreamParser.<init>(PDFStreamParser.java:67)
>
> org.apache.pdfbox.contentstream.PDFStreamEngine.processStreamOperators(PDFStreamEngine.java:541)
>
> org.apache.pdfbox.contentstream.PDFStreamEngine.processType3Stream(PDFStreamEngine.java:305)
>
> org.apache.pdfbox.contentstream.PDFStreamEngine.showType3Glyph(PDFStreamEngine.java:879)
> org.apache.pdfbox.rendering.PageDrawer.showType3Glyph(PageDrawer.java:643)
>
> org.apache.pdfbox.contentstream.PDFStreamEngine.showGlyph(PDFStreamEngine.java:839)
>
> org.apache.pdfbox.contentstream.PDFStreamEngine.showText(PDFStreamEngine.java:803)
>
> org.apache.pdfbox.contentstream.PDFStreamEngine.showTextString(PDFStreamEngine.java:663)
>
> org.apache.pdfbox.contentstream.operator.text.ShowText.process(ShowText.java:63)
>
> org.apache.pdfbox.contentstream.PDFStreamEngine.processOperator(PDFStreamEngine.java:930)
>
> org.apache.pdfbox.contentstream.PDFStreamEngine.processStreamOperators(PDFStreamEngine.java:564)
>
> org.apache.pdfbox.contentstream.PDFStreamEngine.processType3Stream(PDFStreamEngine.java:305)
>
> org.apache.pdfbox.contentstream.PDFStreamEngine.showType3Glyph(PDFStreamEngine.java:879)
> org.apache.pdfbox.rendering.PageDrawer.showType3Glyph(PageDrawer.java:643)
>
> org.apache.pdfbox.contentstream.PDFStreamEngine.showGlyph(PDFStreamEngine.java:839)
>
> org.apache.pdfbox.contentstream.PDFStreamEngine.showText(PDFStreamEngine.java:803)
>
> org.apache.pdfbox.contentstream.PDFStreamEngine.showTextString(PDFStreamEngine.java:663)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
