[PDFBOX-5104] ArrayIndexOutOfBoundsException in isOwnerPassword

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.22, 3.0.0 PDFBox
• Fix Version/s: 2.0.23, 3.0.0 PDFBox
• Component/s: Crypto
• Assignee: Tilman Hausherr
• Reporter: Fabian Meumertzheim
• Created: 22/Feb/21 10:24
• Updated: 19/Mar/21 15:42
• Resolved: 22/Feb/21 17:13

Description

The attached PDF generates the following stack trace when loaded via Loader.loadPDF (using current Git revision 877fe27feaa36e7d24119b053ef41c4247f0691d):

java.lang.ArrayIndexOutOfBoundsException: arraycopy: last source index 32 out of bounds for byte[14]
at java.base/java.lang.System.arraycopy(Native Method)
at org.apache.pdfbox.pdmodel.encryption.StandardSecurityHandler.isOwnerPassword(StandardSecurityHandler.java:566)
at org.apache.pdfbox.pdmodel.encryption.StandardSecurityHandler.prepareForDecryption(StandardSecurityHandler.java:191)
at org.apache.pdfbox.pdfparser.COSParser.prepareDecryption(COSParser.java:2522)
at org.apache.pdfbox.pdfparser.COSParser.rebuildTrailer(COSParser.java:1885)
at org.apache.pdfbox.pdfparser.COSParser.retrieveTrailer(COSParser.java:263)
at org.apache.pdfbox.pdfparser.PDFParser.initialParse(PDFParser.java:127)
at org.apache.pdfbox.pdfparser.PDFParser.parse(PDFParser.java:180)
at org.apache.pdfbox.pdfparser.PDFParser.parse(PDFParser.java:154)
at org.apache.pdfbox.Loader.loadPDF(Loader.java:204)
at com.example.PdfBoxFuzzer.fuzzerTestOneInput(PdfBoxFuzzer.java:31)