You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pdfbox.apache.org by ti...@apache.org on 2021/02/22 19:49:43 UTC
svn commit: r1886812 -
/pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFObjectStreamParser.java
Author: tilman
Date: Mon Feb 22 19:49:43 2021
New Revision: 1886812
URL: http://svn.apache.org/viewvc?rev=1886812&view=rev
Log:
PDFBOX-5106: detect negative values
Modified:
pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFObjectStreamParser.java
Modified: pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFObjectStreamParser.java
URL: http://svn.apache.org/viewvc/pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFObjectStreamParser.java?rev=1886812&r1=1886811&r2=1886812&view=diff
==============================================================================
--- pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFObjectStreamParser.java (original)
+++ pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFObjectStreamParser.java Mon Feb 22 19:49:43 2021
@@ -53,12 +53,20 @@ public class PDFObjectStreamParser exten
{
throw new IOException("/N entry missing in object stream");
}
+ if (numberOfObjects < 0)
+ {
+ throw new IOException("Illegal /N entry in object stream: " + numberOfObjects);
+ }
// get mandatory stream offset of the first object
firstObject = stream.getInt(COSName.FIRST);
if (firstObject == -1)
{
throw new IOException("/First entry missing in object stream");
}
+ if (firstObject < 0)
+ {
+ throw new IOException("Illegal /First entry in object stream: " + firstObject);
+ }
}
/**