You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@poi.apache.org by fa...@apache.org on 2026/05/25 22:15:57 UTC
(poi) branch trunk updated: Update AgileEncryptionVerifier.java
This is an automated email from the ASF dual-hosted git repository.
pjfanning pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/poi.git
The following commit(s) were added to refs/heads/trunk by this push:
new b51eeed176 Update AgileEncryptionVerifier.java
b51eeed176 is described below
commit b51eeed1761127372e7e133f69d4f5ed99678ebd
Author: PJ Fanning <pj...@users.noreply.github.com>
AuthorDate: Mon May 25 23:15:47 2026 +0100
Update AgileEncryptionVerifier.java
---
.../poi/poifs/crypt/agile/AgileEncryptionVerifier.java | 14 +++++++++++++-
1 file changed, 13 insertions(+), 1 deletion(-)
diff --git a/poi/src/main/java/org/apache/poi/poifs/crypt/agile/AgileEncryptionVerifier.java b/poi/src/main/java/org/apache/poi/poifs/crypt/agile/AgileEncryptionVerifier.java
index 1fc3efaee2..e63ac9f848 100644
--- a/poi/src/main/java/org/apache/poi/poifs/crypt/agile/AgileEncryptionVerifier.java
+++ b/poi/src/main/java/org/apache/poi/poifs/crypt/agile/AgileEncryptionVerifier.java
@@ -27,11 +27,13 @@ import org.apache.poi.poifs.crypt.HashAlgorithm;
*/
public class AgileEncryptionVerifier extends EncryptionVerifier {
+ private static final int DEFAULT_MAX_SPIN_COUNT = 1_000_000;
+
/**
* Maximum allowed spinCount to prevent CPU-exhaustion DoS via crafted documents.
* Values beyond this are rejected during parsing.
*/
- private static final int MAX_SPIN_COUNT = 1_000_000;
+ private static int MAX_SPIN_COUNT = DEFAULT_MAX_SPIN_COUNT;
private int keyBits = -1;
private int blockSize = -1;
@@ -39,11 +41,21 @@ public class AgileEncryptionVerifier extends EncryptionVerifier {
/**
* Maximum allowed spinCount to prevent CPU-exhaustion DoS via crafted documents.
* Values beyond this are rejected during parsing.
+ * @since 6.0.0
*/
public static int getMaxSpinCount() {
return MAX_SPIN_COUNT;
}
+ /**
+ * Maximum allowed spinCount to prevent CPU-exhaustion DoS via crafted documents.
+ * Values beyond this are rejected during parsing.
+ * @since 6.0.0
+ */
+ public static void setMaxSpinCount(final int maxSpinCount) {
+ MAX_SPIN_COUNT = maxSpinCount;
+ }
+
@SuppressWarnings("unused")
public AgileEncryptionVerifier(String descriptor) {
this(AgileEncryptionInfoBuilder.parseDescriptor(descriptor));
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@poi.apache.org
For additional commands, e-mail: commits-help@poi.apache.org