You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@pdfbox.apache.org by "Tilman Hausherr (Jira)" <ji...@apache.org> on 2022/03/29 18:17:00 UTC

[jira] [Updated] (PDFBOX-5395) Hangup in COSFilterInputStream.nextRange

     [ https://issues.apache.org/jira/browse/PDFBOX-5395?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tilman Hausherr updated PDFBOX-5395:
------------------------------------
    Fix Version/s: 2.0.26
                   3.0.0 PDFBox

> Hangup in COSFilterInputStream.nextRange
> ----------------------------------------
>
>                 Key: PDFBOX-5395
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-5395
>             Project: PDFBox
>          Issue Type: Bug
>    Affects Versions: 2.0.25
>            Reporter: Aleksej Kozlov
>            Priority: Major
>             Fix For: 2.0.26, 3.0.0 PDFBox
>
>
> On some broken PDFs call _PDSignature.getSignedContent_ never returns.
> After exploring stacktrace I've found cycle in _COSFilterInputStream.nextRange_.
> {code:java}
>             while (this.position < this.ranges[this.range][0])
>             {
>                 long skipped = super.skip(this.ranges[this.range][0] - this.position);
>                 this.position += skipped;
>             }
> {code}
> Javadoc for _skip_ says _"The skip method may, for a variety ofreasons, end up skipping over some smaller number of bytes, possibly 0."_
> So, when _skip_ returns 0 this cycle became infinite.
> Tried in versions 2.0.25 and 3.0.0-RC1.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
For additional commands, e-mail: dev-help@pdfbox.apache.org