[
https://issues.apache.org/jira/browse/PDFBOX-5022?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17236275#comment-17236275
]
Michael Klink commented on PDFBOX-5022:
---------------------------------------
{quote}Google Chrome and Adobe can print this PDF without issue{quote}
When I open the file in Adobe Reader, it shows me "An error exists on this
page. Acrobat may not display the page correctly. Please contact the person who
created the PDF document to correct the problem." I wouldn't call the printing
"without issue" if already in opening Adobe Reader declares that it may not
display (and, therefore, also print) the page correctly.
Nonetheless, crashing should be prevented, this looks like a DOS vulnerability.
> Recursion is too deep
> ---------------------
>
> Key: PDFBOX-5022
> URL: https://issues.apache.org/jira/browse/PDFBOX-5022
> Project: PDFBox
> Issue Type: Bug
> Components: Rendering
> Affects Versions: 2.0.21
> Reporter: Tres Finocchiaro
> Priority: Major
> Attachments: crash_pdf.pdf
>
>
> *OS:* Windows 10 x86_64
> *Java:* 1.8.0u271 x86_64
> The attached A4 PDF is created with TCPDF 6.2.26.
> * At 600dpi, the attached PDF prints over > 4GB (-Xmx4096m) heap and crashes
> the JVM.
> * At 300dpi, the attached PDF prints under 2GB (-Xmx2048m) heap but shows
> the following warning(s).
> Google Chrome and Adobe can print this PDF without issue. The crash only
> occurs using PDFBOX.
> * Calling "*PDFDebugger*" does NOT crash the JVM.
> * Calling "*PrintPDF*" DOES crash the JVM.
> For reference, the public mailing list where this was reported:
> [https://groups.google.com/g/qz-print/c/REV9fP3rqeM/m/OW1Gf2QZBQAJ]
>
> {code:java}
> Nov 19, 2020 10:53:46 PM
> org.apache.pdfbox.contentstream.operator.graphics.DrawObject process
> SCHWERWIEGEND: recursion is too deep, skipping form XObject
> Nov 19, 2020 10:53:46 PM
> org.apache.pdfbox.contentstream.operator.graphics.DrawObject process
> SCHWERWIEGEND: recursion is too deep, skipping form XObject
> Nov 19, 2020 10:53:47 PM
> org.apache.pdfbox.contentstream.operator.graphics.DrawObject process
> SCHWERWIEGEND: recursion is too deep, skipping form XObject{code}
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]