[PDFBOX-4347] ArrayIndexOutOfBoundsException in PDFXrefStreamParser

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.0.13, 3.0.0 PDFBox
• Component/s: Parsing
• Assignee: Tilman Hausherr
• Reporter: Robin Schimpf
• Created: 17/Oct/18 18:59
• Updated: 02/Dec/18 17:06
• Resolved: 21/Oct/18 17:45

Description

Fuzzing PDF loading with JQF triggered an ArrayIndexOutOfBoundsException.

java.lang.ArrayIndexOutOfBoundsException: 1
	at org.apache.pdfbox.pdfparser.PDFXrefStreamParser.parse(PDFXrefStreamParser.java:150)
	at org.apache.pdfbox.pdfparser.COSParser.parseXrefStream(COSParser.java:2767)
	at org.apache.pdfbox.pdfparser.COSParser.parseXrefObjStream(COSParser.java:442)
	at org.apache.pdfbox.pdfparser.COSParser.parseXref(COSParser.java:392)
	at org.apache.pdfbox.pdfparser.COSParser.retrieveTrailer(COSParser.java:254)
	at org.apache.pdfbox.pdfparser.PDFParser.initialParse(PDFParser.java:171)
	at org.apache.pdfbox.pdfparser.PDFParser.parse(PDFParser.java:220)
	at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1160)
	at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1057)
    ...

The Code used for fuzzing is

PDDocument.load(inputStream)