Details
-
Bug
-
Status: Closed
-
Minor
-
Resolution: Fixed
-
1.8.16, 2.0.12
-
None
Description
Fuzzing PDF loading with JQF triggered an ArrayIndexOutOfBoundsException.
java.lang.ArrayIndexOutOfBoundsException: 172
at org.apache.pdfbox.filter.ASCIIHexFilter.decode(ASCIIHexFilter.java:83)
at org.apache.pdfbox.filter.Filter.decode(Filter.java:87)
at org.apache.pdfbox.cos.COSInputStream.create(COSInputStream.java:77)
at org.apache.pdfbox.cos.COSStream.createInputStream(COSStream.java:175)
at org.apache.pdfbox.cos.COSStream.createInputStream(COSStream.java:163)
at org.apache.pdfbox.pdfparser.PDFObjectStreamParser.<init>(PDFObjectStreamParser.java:55)
at org.apache.pdfbox.pdfparser.COSParser.parseObjectStream(COSParser.java:977)
at org.apache.pdfbox.pdfparser.COSParser.retrieveCOSDictionary(COSParser.java:2277)
at org.apache.pdfbox.pdfparser.COSParser.searchForTrailerItems(COSParser.java:2235)
at org.apache.pdfbox.pdfparser.COSParser.rebuildTrailer(COSParser.java:2216)
at org.apache.pdfbox.pdfparser.COSParser.retrieveTrailer(COSParser.java:279)
at org.apache.pdfbox.pdfparser.PDFParser.initialParse(PDFParser.java:171)
at org.apache.pdfbox.pdfparser.PDFParser.parse(PDFParser.java:220)
at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1160)
at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1057)
...
The Code used for fuzzing is
PDDocument.load(inputStream)