[
https://issues.apache.org/jira/browse/PDFBOX-5395?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17510070#comment-17510070
]
ASF subversion and git services commented on PDFBOX-5395:
---------------------------------------------------------
Commit 1899113 from Tilman Hausherr in branch 'pdfbox/branches/2.0'
[ https://svn.apache.org/r1899113 ]
PDFBOX-5395: avoid endless loop, as suggested by Aleksej Kozlov
> Hangup in COSFilterInputStream.nextRange
> ----------------------------------------
>
> Key: PDFBOX-5395
> URL: https://issues.apache.org/jira/browse/PDFBOX-5395
> Project: PDFBox
> Issue Type: Bug
> Affects Versions: 2.0.25
> Reporter: Aleksej Kozlov
> Priority: Major
>
> On some broken PDFs call _PDSignature.getSignedContent_ never returns.
> After exploring stacktrace I've found cycle in
> _COSFilterInputStream.nextRange_.
> {code:java}
> while (this.position < this.ranges[this.range][0])
> {
> long skipped = super.skip(this.ranges[this.range][0] -
> this.position);
> this.position += skipped;
> }
> {code}
> Javadoc for _skip_ says _"The skip method may, for a variety ofreasons, end
> up skipping over some smaller number of bytes, possibly 0."_
> So, when _skip_ returns 0 this cycle became infinite.
> Tried in versions 2.0.25 and 3.0.0-RC1.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: dev-h...@pdfbox.apache.org
