[PDFBOX-4587] SASLPrep declares that u2070E is private use

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.16
• Fix Version/s: 2.0.17, 3.0.0 PDFBox
• Component/s: Crypto
• Assignee: Tilman Hausherr
• Reporter: Tilman Hausherr
• Created: 29/Jun/19 03:23
• Updated: 30/Jun/20 06:13
• Resolved: 29/Jun/19 03:39

Description

As reported by [~[e-mail]] in related issue. This is a typo in the SASLprep code 

https://tools.ietf.org/html/rfc3454#appendix-C.3

   ----- Start Table C.3 -----
   E000-F8FF; [PRIVATE USE, PLANE 0]
   F0000-FFFFD; [PRIVATE USE, PLANE 15]
   100000-10FFFD; [PRIVATE USE, PLANE 16]
   ----- End Table C.3 -----

The code is:

        return 0xE000 <= codepoint && codepoint <= 0xF8FF
                || 0xF000 <= codepoint && codepoint <= 0xFFFFD
                || 0x100000 <= codepoint && codepoint <= 0x10FFFD;

He missed a "0" in the second line

Issue Links

• is related to: PDFBOX-4155 Password Security with Unicode needs SASLprep
• is related to: TIKA-2858 JAXRS server: allow passwords with special chars (MIME encoded words)
• links to: PR #4