sharanggupta opened a new pull request, #553: URL: https://github.com/apache/pdfbox/pull/553
`PredictorOutputStream` checked only `rowLength < 0`, so a non-PNG predictor with a zero row length (for example `/Predictor 2 /Columns 0`, or `/Colors 0`, or `/BitsPerComponent 0`) was accepted and its `write()` loop then copied 0 bytes per iteration and never advanced: a non-terminating decode, reachable at load time via the cross-reference-stream decode. This rejects `rowLength <= 0` alongside the existing negative check, with a `PredictorTest` case. Robustness hardening; no security impact is claimed per the PDFBox security policy. Base is `trunk`; the same gap exists on `3.0`/`2.0` for backport. I will add the PDFBOX JIRA reference to the title. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
