floyd created PDFBOX-4193:
-----------------------------

             Summary: StackOverflow
                 Key: PDFBOX-4193
                 URL: https://issues.apache.org/jira/browse/PDFBOX-4193
             Project: PDFBox
          Issue Type: Bug
          Components: Parsing, PDModel
            Reporter: floyd
         Attachments: 5_uncaught_stackoverflow_checkPagesDictionary.pdf, 
6_uncaught_stackoverflow_getInheritableAttribute.pdf

As part of a fuzzing run with the AFL-based Kelinci fuzzer found at 
[https://github.com/isstac/kelinci] for a larger software that uses PDFBox I 
found the following StackOverflowError issues:


{code:java}
Exception in thread "main" java.lang.StackOverflowError
    at java.util.HashMap.hash(HashMap.java:338)
    at java.util.LinkedHashMap.get(LinkedHashMap.java:440)
    at 
org.apache.pdfbox.cos.COSDictionary.getDictionaryObject(COSDictionary.java:188)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2207)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230)
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230)
    [...]
    at 
org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2230){code}


Additionally, a second StackOverflowError was found:


{code:java}
Exception in thread "main" java.lang.StackOverflowError
    at java.util.HashMap.hash(HashMap.java:338)
    at java.util.LinkedHashMap.get(LinkedHashMap.java:440)
    at 
org.apache.pdfbox.cos.COSDictionary.getDictionaryObject(COSDictionary.java:188)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:102)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111)

    [...]
    at 
org.apache.pdfbox.pdmodel.PDPageTree.getInheritableAttribute(PDPageTree.java:111){code}

The issues can be reproduced with the attached files.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to