[PDFBOX-2595] Pdfbox always sets the second part of documentID to the same value

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.8.8, 2.0.0
• Fix Version/s: 1.8.9, 2.0.0
• Component/s: PDModel
• Assignee: Andreas Lehmkühler
• Reporter: Asger Askov Blekinge
• Created: 08/Jan/15 15:51
• Updated: 28/Mar/15 14:10
• Resolved: 26/Jan/15 19:07

Description

From COSWriter.java lines 1268 (trunk) 1500 (1.8)

COSString firstID = missingID ? new COSString( md5.digest() ) : (COSString)idArray.get(0);

COSString secondID = new COSString( md5.digest() );

Notice that digest is called in both lines

The javadoc for md5.digest() goes
"Completes the hash computation by performing final operations such as padding. The digest is reset after this call is made."

So, if missingID == true then the secondID will always be the hash of the empty string.

Acrobat reader uses this value for it's search index, as hinted at here
https://stackoverflow.com/a/20201670

Issue Links

• relates to: PDFBOX-2395 Signing PDF document changes documentID