svn commit: r1927434 - pdfbox/branches/3.0/pdfbox/src/main/java/org/apache/pdfbox/pdfparser

[tilman]

Author: tilman
Date: Wed Jul 23 11:21:12 2025
New Revision: 1927434

Log:
PDFBOX-6037: avoid OOM, as suggested by David Justamante and Michael Klink

Modified:
   
pdfbox/branches/3.0/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFXrefStreamParser.java

Modified: 
pdfbox/branches/3.0/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFXrefStreamParser.java
==============================================================================
--- 
pdfbox/branches/3.0/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFXrefStreamParser.java
       Wed Jul 23 10:49:06 2025        (r1927433)
+++ 
pdfbox/branches/3.0/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFXrefStreamParser.java
       Wed Jul 23 11:21:12 2025        (r1927434)
@@ -85,6 +85,11 @@ public class PDFXrefStreamParser extends
         {
             throw new IOException("Incorrect /W array in XRef: " + 
Arrays.toString(w));
         }
+        if (w[0] + w[1] + w[2] > 20)
+        {
+            // PDFBOX-6037
+            throw new IOException("Incorrect /W array in XRef: " + 
Arrays.toString(w));
+        }
 
         COSArray indexArray = stream.getCOSArray(COSName.INDEX);
         if (indexArray == null)