[jira] [Updated] (PDFBOX-6044) Potential OOM in PfbParser

["Tilman Hausherr (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/PDFBOX-6044?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tilman Hausherr updated PDFBOX-6044:
------------------------------------
    Component/s: FontBox

> Potential OOM in PfbParser
> --------------------------
>
>                 Key: PDFBOX-6044
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-6044
>             Project: PDFBox
>          Issue Type: Bug
>          Components: FontBox, Parsing
>    Affects Versions: 4.0.0
>            Reporter: David Justamante
>            Priority: Minor
>              Labels: patch
>         Attachments: example.pdf, patch.diff
>
>
> This issue is being *manually* filed by the competition organizers. We recognize there is a number of AI generated submissions as of late. We have gone through the manual process of bug/patch validation to prevent unnecessary "noise", respecting maintainers' time. 
> This submission is being sent as part of DARPA's AIxCC competition. (https://aicyberchallenge.com) This issue was discovered and validated by competition engineers during challenge development. The patch was manually constructed by the competition engineers.
> Read length then allocate. Integer overflow can cause the existing length check to fail. We think this is an actual bug because there is an existing check.
> (AIxCC Internal: CHA-1727)



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
For additional commands, e-mail: dev-help@pdfbox.apache.org