[PDFBOX-5578] Limit maximum number of nesting levels for COSArrays/COSDictionaries

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.0.27, 3.0.0 PDFBox
• Component/s: Parsing
• Assignee: Unassigned
• Reporter: Andreas Lehmkühler
• Created: 22/Mar/23 06:51
• Updated: 22/Mar/23 06:51

Description

The PDFBox user Jay filed an issue with the attached pdf using [e-mail]

It is a handcrafted pdf containing a COSArray with a lot of nesting levels which leads to a StackOverflowException.
Theoretically there is no maximum nesting level for COSArrays or COSDictionaries but in the wild just a few number of levels may occur. Saying that, it makes sense to introduce a maximum number of nesting levels to avoid such exceptions