[ 
https://issues.apache.org/jira/browse/PDFBOX-2233?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14074907#comment-14074907
 ] 

John Hewson commented on PDFBOX-2233:
-------------------------------------

{quote}
files don't have to be cached in full
{quote}

Are you sure? Isn't NonSequentialPDFParser random access?

> Make PreflightParser sandbox safe
> ---------------------------------
>
>                 Key: PDFBOX-2233
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-2233
>             Project: PDFBox
>          Issue Type: Improvement
>          Components: Preflight
>    Affects Versions: 2.0.0
>            Reporter: simon steiner
>         Attachments: avoidtmpfile.patch
>
>
> It should be possible to pass a DataSource into PreflightParser without a 
> temp file being created. Temp file is being created in NonSequentialPDFParser 
> causing a SecurityException.
> java.lang.SecurityException: Unable to create temporary file
>       at java.io.File.createTempFile(File.java:2018)
>       at java.io.File.createTempFile(File.java:2070)
>       at 
> org.apache.pdfbox.pdfparser.NonSequentialPDFParser.createTmpFile(NonSequentialPDFParser.java:281)
>       at 
> org.apache.pdfbox.pdfparser.NonSequentialPDFParser.<init>(NonSequentialPDFParser.java:261)
>       at 
> org.apache.pdfbox.pdfparser.NonSequentialPDFParser.<init>(NonSequentialPDFParser.java:247)
>       at 
> org.apache.pdfbox.preflight.parser.PreflightParser.<init>(PreflightParser.java:125)



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to