[ 
https://issues.apache.org/jira/browse/PDFBOX-1946?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13936071#comment-13936071
 ] 

Tilman Hausherr commented on PDFBOX-1946:
-----------------------------------------

[~fred_andrews], please either upload a simple applet that has the NPE that 
should be back now that the null check in PDFStreamEngine is gone; if you 
can't, tell us what features of PDFBOX you are using and if possible, post the 
stack trace.

Alternatively, I wonder if it might be enough to just throw the exception at 
all the places where the SecurityException catch was inserted.

> Running within an Applet has many AccessControlException 's
> -----------------------------------------------------------
>
>                 Key: PDFBOX-1946
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-1946
>             Project: PDFBox
>          Issue Type: Wish
>    Affects Versions: 1.8.4
>         Environment: Running within an Applet
>            Reporter: Fred Andrews
>              Labels: Security
>             Fix For: 1.8.5, 2.0.0
>
>         Attachments: patch.zip
>
>
> I've identified 6 modules that should be modified to avoid 
> AccessControlException's while running within an Applet.  My solution would 
> be to catch each AccessControlException and then use a default or continue 
> on.  For most of these, that is probably the best solution, for a few 
> especially PDFStreamEngine someone may have a better idea.
> The modules that have issues:
> pdfbox\pdfparser\BaseParser -- line 131 call to Boolean.getBoolean, line 170 
> call to Integer.getInteger
> pdfbox\util\PDFTextStripper -- line 79 call to System.getProperty()
> pdfbox\util\ResourceLoader -- line 67 call to getSystemClassLoader()
> pdfbox\pdmodel\graphics\color\PDColorState -- line 50, call to Color.getColor
> pdfbox/encoding/Encoding -- line 78, call to System.getProperty
> pdfbox\util\PDFStreamEngine -- Line 351 & 364 check for font == null (will be 
> null if had resource loading problems)
> Not sure what the best way is to proceed.  Please advise.
> Thanks



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to