[PDFBOX-5345] IllegalArgumentException: Input buffer too short in StandardSecurityHandler.computeRC4key

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.0.24
• Fix Version/s: 2.0.26, 3.0.0 PDFBox
• Component/s: Crypto
• Labels: regression
• External issue URL: https://bugs.freedesktop.org/show_bug.cgi?id=89422
• Assignee: Tilman Hausherr
• Reporter: Tilman Hausherr
• Created: 16/Dec/21 04:30
• Updated: 21/Apr/22 15:38
• Resolved: 16/Dec/21 19:30

Description

java.lang.IllegalArgumentException: Input buffer too short
        at java.base/java.security.MessageDigest.update(MessageDigest.java:347)
        at org.apache.pdfbox.pdmodel.encryption.StandardSecurityHandler.computeRC4key(StandardSecurityHandler.java:894)
        at org.apache.pdfbox.pdmodel.encryption.StandardSecurityHandler.getUserPassword(StandardSecurityHandler.java:617)
        at org.apache.pdfbox.pdmodel.encryption.StandardSecurityHandler.isOwnerPassword(StandardSecurityHandler.java:595)
        at org.apache.pdfbox.pdmodel.encryption.StandardSecurityHandler.prepareForDecryption(StandardSecurityHandler.java:213)
        at org.apache.pdfbox.pdfparser.COSParser.prepareDecryption(COSParser.java:2532)

Probably because of PDFBOX-5312

Issue Links

• relates to: PDFBOX-5312 Decryption for V4 fails when no Length entry is set in Encryption Dictionary