[PDFBOX-4333] ClassCastException when loading PDF

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.0.12
• Fix Version/s: 2.0.13, 3.0.0 PDFBox
• Component/s: Parsing
• Assignee: Tilman Hausherr
• Reporter: Robin Schimpf
• Created: 07/Oct/18 16:11
• Updated: 02/Dec/18 17:06
• Resolved: 08/Oct/18 18:44

Description

Fuzzing PDF loading with JQF triggered a ClassCastException. All attached files trigger the exception for a different class but are basically the same.

org.apache.pdfbox.cos.COSArray cannot be cast to org.apache.pdfbox.cos.COSObject
java.lang.ClassCastException: org.apache.pdfbox.cos.COSArray cannot be cast to org.apache.pdfbox.cos.COSObject
    at org.apache.pdfbox.pdfparser.COSParser.checkPagesDictionary(COSParser.java:2337)
    at org.apache.pdfbox.pdfparser.COSParser.checkPages(COSParser.java:2321)
    at org.apache.pdfbox.pdfparser.PDFParser.initialParse(PDFParser.java:193)
    at org.apache.pdfbox.pdfparser.PDFParser.parse(PDFParser.java:220)
    at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1160)
    at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1057)
    ...

The Code used for fuzzing is

PDDocument.load(inputStream)

Throwing an Exception is ok since no other PDF reader I tried is able to load the files. But it should not be an ClassCastException.