[
https://issues.apache.org/jira/browse/PDFBOX-4348?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robin Schimpf updated PDFBOX-4348:
----------------------------------
Description:
Fuzzing PDF loading with [JQF|https://github.com/rohanpadhye/jqf] triggered an
ClassCastException.
{code:java}
java.lang.ClassCastException: org.apache.pdfbox.cos.COSString cannot be cast to
org.apache.pdfbox.cos.COSDictionary
at
org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2919)
at
org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2927)
at
org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2927)
at
org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2927)
at
org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2927)
at
org.apache.pdfbox.pdfparser.COSParser.prepareDecryption(COSParser.java:2865)
at
org.apache.pdfbox.pdfparser.COSParser.retrieveTrailer(COSParser.java:284)
at
org.apache.pdfbox.pdfparser.PDFParser.initialParse(PDFParser.java:171)
at org.apache.pdfbox.pdfparser.PDFParser.parse(PDFParser.java:220)
at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1160)
at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1057)
...
{code}
The Code used for fuzzing is
{code:java}
PDDocument.load(inputStream)
{code}
was:
Fuzzing PDF loading with [JQF|https://github.com/rohanpadhye/jqf] triggered an
ArrayIndexOutOfBoundsException.
{code:java}
java.lang.ClassCastException: org.apache.pdfbox.cos.COSString cannot be cast to
org.apache.pdfbox.cos.COSDictionary
at
org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2919)
at
org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2927)
at
org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2927)
at
org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2927)
at
org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2927)
at
org.apache.pdfbox.pdfparser.COSParser.prepareDecryption(COSParser.java:2865)
at
org.apache.pdfbox.pdfparser.COSParser.retrieveTrailer(COSParser.java:284)
at
org.apache.pdfbox.pdfparser.PDFParser.initialParse(PDFParser.java:171)
at org.apache.pdfbox.pdfparser.PDFParser.parse(PDFParser.java:220)
at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1160)
at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1057)
...
{code}
The Code used for fuzzing is
{code:java}
PDDocument.load(inputStream)
{code}
> ClassCastException in COSParser
> -------------------------------
>
> Key: PDFBOX-4348
> URL: https://issues.apache.org/jira/browse/PDFBOX-4348
> Project: PDFBox
> Issue Type: Bug
> Affects Versions: 2.0.12
> Reporter: Robin Schimpf
> Priority: Minor
> Attachments: ClassCastException COSParser#parseDictionaryRecursive
>
>
> Fuzzing PDF loading with [JQF|https://github.com/rohanpadhye/jqf] triggered
> an ClassCastException.
> {code:java}
> java.lang.ClassCastException: org.apache.pdfbox.cos.COSString cannot be cast
> to org.apache.pdfbox.cos.COSDictionary
> at
> org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2919)
> at
> org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2927)
> at
> org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2927)
> at
> org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2927)
> at
> org.apache.pdfbox.pdfparser.COSParser.parseDictionaryRecursive(COSParser.java:2927)
> at
> org.apache.pdfbox.pdfparser.COSParser.prepareDecryption(COSParser.java:2865)
> at
> org.apache.pdfbox.pdfparser.COSParser.retrieveTrailer(COSParser.java:284)
> at
> org.apache.pdfbox.pdfparser.PDFParser.initialParse(PDFParser.java:171)
> at org.apache.pdfbox.pdfparser.PDFParser.parse(PDFParser.java:220)
> at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1160)
> at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1057)
> ...
> {code}
> The Code used for fuzzing is
> {code:java}
> PDDocument.load(inputStream)
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: dev-h...@pdfbox.apache.org
