You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@pdfbox.apache.org by "John Hewson (JIRA)" <ji...@apache.org> on 2014/10/11 01:33:34 UTC

[jira] [Updated] (PDFBOX-2233) Make PreflightParser sandbox safe (RandomAccessRead)

     [ https://issues.apache.org/jira/browse/PDFBOX-2233?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

John Hewson updated PDFBOX-2233:
--------------------------------
    Fix Version/s: 2.0.0

> Make PreflightParser sandbox safe (RandomAccessRead)
> ----------------------------------------------------
>
>                 Key: PDFBOX-2233
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-2233
>             Project: PDFBox
>          Issue Type: Improvement
>          Components: Parsing, Preflight
>    Affects Versions: 2.0.0
>            Reporter: simon steiner
>             Fix For: 2.0.0
>
>         Attachments: avoidtmpfile.patch
>
>
> It should be possible to pass a DataSource into PreflightParser without a temp file being created. Temp file is being created in NonSequentialPDFParser causing a SecurityException.
> java.lang.SecurityException: Unable to create temporary file
> 	at java.io.File.createTempFile(File.java:2018)
> 	at java.io.File.createTempFile(File.java:2070)
> 	at org.apache.pdfbox.pdfparser.NonSequentialPDFParser.createTmpFile(NonSequentialPDFParser.java:281)
> 	at org.apache.pdfbox.pdfparser.NonSequentialPDFParser.<init>(NonSequentialPDFParser.java:261)
> 	at org.apache.pdfbox.pdfparser.NonSequentialPDFParser.<init>(NonSequentialPDFParser.java:247)
> 	at org.apache.pdfbox.preflight.parser.PreflightParser.<init>(PreflightParser.java:125)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)