[PDFBOX-4350] IllegalArgumentException in PDFObjectStreamParser

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.0.12
• Fix Version/s: 2.0.13, 3.0.0 PDFBox
• Component/s: Parsing
• Assignee: Tilman Hausherr
• Reporter: Robin Schimpf
• Created: 17/Oct/18 19:05
• Updated: 02/Dec/18 17:06
• Resolved: 20/Oct/18 18:00

Description

Fuzzing PDF loading with JQF triggered an IllegalArgumentException.

java.lang.IllegalArgumentException: Illegal Capacity: -1
	at java.util.ArrayList.<init>(ArrayList.java:157)
	at org.apache.pdfbox.pdfparser.PDFObjectStreamParser.parse(PDFObjectStreamParser.java:72)
	at org.apache.pdfbox.pdfparser.COSParser.parseObjectStream(COSParser.java:994)
	at org.apache.pdfbox.pdfparser.COSParser.parseObjectDynamically(COSParser.java:880)
	at org.apache.pdfbox.pdfparser.COSParser.parseObjectDynamically(COSParser.java:794)
	at org.apache.pdfbox.pdfparser.COSParser.parseDictObjects(COSParser.java:754)
	at org.apache.pdfbox.pdfparser.PDFParser.initialParse(PDFParser.java:185)
	at org.apache.pdfbox.pdfparser.PDFParser.parse(PDFParser.java:220)
	at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1160)
	at org.apache.pdfbox.pdmodel.PDDocument.load(PDDocument.java:1057)
    ...

The Code used for fuzzing is

PDDocument.load(inputStream)

Issue Links

• is related to: PDFBOX-4357 IllegalArgumentException "root cannot be null"