Robin Schimpf created PDFBOX-4351:
-------------------------------------

             Summary: IndexOutOfBoundsException when reading from 
InputStreamSource
                 Key: PDFBOX-4351
                 URL: https://issues.apache.org/jira/browse/PDFBOX-4351
             Project: PDFBox
          Issue Type: Bug
    Affects Versions: 2.0.12
            Reporter: Robin Schimpf
         Attachments: IndexOutOfBoundsException in PushbackInputStream called 
from InputStreamSource#read

Fuzzing PDF loading with [JQF|https://github.com/rohanpadhye/jqf] triggered an 
IndexOutOfBoundsException.
{code:java}
java.lang.IndexOutOfBoundsException
        at java.io.PushbackInputStream.read(PushbackInputStream.java:170)
        at 
org.apache.pdfbox.pdfparser.InputStreamSource.read(InputStreamSource.java:62)
        at 
org.apache.pdfbox.pdfparser.InputStreamSource.readFully(InputStreamSource.java:113)
        at 
org.apache.pdfbox.pdfparser.BaseParser.parseDirObject(BaseParser.java:907)
        at 
org.apache.pdfbox.pdfparser.BaseParser.parseCOSArray(BaseParser.java:631)
        at 
org.apache.pdfbox.pdfparser.BaseParser.parseDirObject(BaseParser.java:874)
        at 
org.apache.pdfbox.pdfparser.PDFObjectStreamParser.parse(PDFObjectStreamParser.java:84)
        at 
org.apache.pdfbox.pdfparser.COSParser.parseObjectStream(COSParser.java:994)
        at 
org.apache.pdfbox.pdfparser.COSParser.retrieveCOSDictionary(COSParser.java:2277)
        at 
org.apache.pdfbox.pdfparser.COSParser.searchForTrailerItems(COSParser.java:2235)
        at 
org.apache.pdfbox.pdfparser.COSParser.rebuildTrailer(COSParser.java:2216)
        at 
org.apache.pdfbox.pdfparser.COSParser.retrieveTrailer(COSParser.java:279)
        at 
org.apache.pdfbox.pdfparser.PDFParser.initialParse(PDFParser.java:171)
        at org.apache.pdfbox.pdfparser.PDFParser.parse(PDFParser.java:220)
        at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1160)
        at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1057)
    ...

{code}
The Code used for fuzzing is
{code:java}
PDDocument.load(inputStream)
{code}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: dev-h...@pdfbox.apache.org

Reply via email to