[IMAGING-178] PnmImageParser does not check the validity of input PAM header

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.0-alpha1
• Component/s: Format: PNM
• Assignee: Unassigned
• Reporter: emopers
• Created: 13/Jan/16 18:05
• Updated: 03/May/19 08:39
• Resolved: 12/Jun/16 14:47

Description

PnmImageParser.java directly calls tokenizer.nextToken() at line no 160, 163, 166, 169 and 172 on java.util.StringTokenizer tokenizer without checking if there are more tokens. Because tokenizer is built from the bytes string that can be invalid, this can lead to a runtime exception without a useful error message. This can be easily fixed by calling tokenizer.hasMoreTokens() before calling tokenizer.nextToken() at each line number mentioned before and throwing useful error message.