dany/pdfio
1
0
Fork 0
mirror of https://github.com/michaelrsweet/pdfio.git synced 2025-04-06 08:56:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add PDFIO_MAX_STRING constant to control maximum allowed PDF strings (Issue #117)

Browse Source
This commit is contained in:
Michael R Sweet 2025-04-04 19:27:03 -04:00
parent 8cca645835
commit fe755eac3d
No known key found for this signature in database
GPG Key ID: BE67C75EC81F3244
3 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGES.md
View File

@ -5,6 +5,7 @@ Changes in PDFio
v1.5.2 - YYYY-MM-DD v1.5.2 - YYYY-MM-DD
------------------- -------------------
- Updated maximum allowed PDF string size to 64k (Issue #117)
- Fixed parsing of certain date/time values (Issue #115) - Fixed parsing of certain date/time values (Issue #115)
- Fixed support for empty name values (Issue #116) - Fixed support for empty name values (Issue #116)

1
pdfio-private.h
View File

@ -94,6 +94,7 @@
// //
# define PDFIO_MAX_DEPTH 32 // Maximum nesting depth for values # define PDFIO_MAX_DEPTH 32 // Maximum nesting depth for values
# define PDFIO_MAX_STRING 65536 // Maximum length of string
typedef void (*_pdfio_extfree_t)(void *); typedef void (*_pdfio_extfree_t)(void *);
// Extension data free function // Extension data free function

14
pdfio-value.c
View File

@ -125,7 +125,8 @@ _pdfioValueDecrypt(pdfio_file_t *pdf, // I - PDF file
_pdfio_crypto_ctx_t ctx; // Decryption context _pdfio_crypto_ctx_t ctx; // Decryption context
_pdfio_crypto_cb_t cb; // Decryption callback _pdfio_crypto_cb_t cb; // Decryption callback
size_t ivlen; // Number of initialization vector bytes size_t ivlen; // Number of initialization vector bytes
uint8_t temp[32768]; // Temporary buffer for decryption uint8_t temp[PDFIO_MAX_STRING + 32];
// Temporary buffer for decryption
size_t templen; // Number of actual data bytes size_t templen; // Number of actual data bytes
time_t timeval; // Date/time value time_t timeval; // Date/time value
@ -300,7 +301,7 @@ _pdfioValueRead(pdfio_file_t *pdf, // I - PDF file
_pdfio_value_t *v, // I - Value _pdfio_value_t *v, // I - Value
size_t depth) // I - Depth of value size_t depth) // I - Depth of value
{ {
char token[32768]; // Token buffer char token[PDFIO_MAX_STRING];// Token buffer
time_t timeval; // Date/time value time_t timeval; // Date/time value
#ifdef DEBUG #ifdef DEBUG
static const char * const valtypes[] = static const char * const valtypes[] =
@ -546,7 +547,8 @@ _pdfioValueWrite(pdfio_file_t *pdf, // I - PDF file
case PDFIO_VALTYPE_BINARY : case PDFIO_VALTYPE_BINARY :
{ {
size_t databytes; // Bytes to write size_t databytes; // Bytes to write
uint8_t temp[32768], // Temporary buffer for encryption uint8_t temp[PDFIO_MAX_STRING + 32],
// Temporary buffer for encryption
*dataptr; // Pointer into data *dataptr; // Pointer into data
if (obj && pdf->encryption) if (obj && pdf->encryption)
@ -609,7 +611,8 @@ _pdfioValueWrite(pdfio_file_t *pdf, // I - PDF file
if (obj && pdf->encryption) if (obj && pdf->encryption)
{ {
// Write encrypted string... // Write encrypted string...
uint8_t temp[32768], // Encrypted bytes uint8_t temp[PDFIO_MAX_STRING + 32],
// Encrypted bytes
*tempptr; // Pointer into encrypted bytes *tempptr; // Pointer into encrypted bytes
_pdfio_crypto_ctx_t ctx; // Encryption context _pdfio_crypto_ctx_t ctx; // Encryption context
_pdfio_crypto_cb_t cb; // Encryption callback _pdfio_crypto_cb_t cb; // Encryption callback
@ -660,7 +663,8 @@ _pdfioValueWrite(pdfio_file_t *pdf, // I - PDF file
if (obj && pdf->encryption) if (obj && pdf->encryption)
{ {
// Write encrypted string... // Write encrypted string...
uint8_t temp[32768], // Encrypted bytes uint8_t temp[PDFIO_MAX_STRING + 32],
// Encrypted bytes
*tempptr; // Pointer into encrypted bytes *tempptr; // Pointer into encrypted bytes
_pdfio_crypto_ctx_t ctx; // Encryption context _pdfio_crypto_ctx_t ctx; // Encryption context
_pdfio_crypto_cb_t cb; // Encryption callback _pdfio_crypto_cb_t cb; // Encryption callback