aboutsummaryrefslogtreecommitdiffstats
path: root/libqpdf/QPDF.cc
AgeCommit message (Collapse)Author
2017-08-22Limit token length during xref recoveryJay Berkenbilt
While scanning the file looking for objects, limit the length of tokens we allow. This prevents us from getting caught up in reading a file character by character while digging through large streams.
2017-08-22Fix logic error in recoveryJay Berkenbilt
A stray semicolon caused a condition to be incorrectly applied during stream length recovery.
2017-08-22Push QPDF member variables into a nested classJay Berkenbilt
Pushing member variables into a nested class enables addition of new member variables without breaking binary compatibility.
2017-08-21Enable finer grained control of stream decodingJay Berkenbilt
This commit adds several API methods that enable control over which types of filters QPDF will attempt to decode. It also adds support for /RunLengthDecode and /DCTDecode filters for both encoding and decoding.
2017-08-12Prevent a division by zero error (fixes #141)Jay Berkenbilt
Bad /W in an xref stream could cause a division by zero error. Now this is handled as a special case.
2017-08-11Read xref table without PCREJay Berkenbilt
Also accept more errors than before.
2017-08-11Reconstruct xref without PCREJay Berkenbilt
2017-08-11Improve stream length recoveryJay Berkenbilt
Eliminate PCRE and find endobj not preceded by endstream. Be more lax about placement of endstream and endobj.
2017-08-11Find xref without PCREJay Berkenbilt
2017-08-11Find starxref without PCREJay Berkenbilt
2017-08-11Find header without PCREJay Berkenbilt
2017-08-11Allow QPDFTokenizer::readToken to return bad tokensJay Berkenbilt
Sometimes we want to ignore bad tokens rather than having them throw an exception. A coverage case is commented out here and added in a later commit.
2017-07-30Catch more exceptions while resolving objectsJay Berkenbilt
2017-07-30When recover stream length, indicate the length (fixes #44)Jay Berkenbilt
2017-07-29Handle zlib data errors better (fixes #106)Jay Berkenbilt
2017-07-29Better recovery of bad stream start (fixes #104)Jay Berkenbilt
2017-07-29Use 1.2 as the version if we can't read it from the headerJay Berkenbilt
The code was using 1.0, but we use /FlateDecode, which didn't appear until 1.2.
2017-07-29Add option to preserve unreferenced objectsJay Berkenbilt
2017-07-29Explicitly check root dictionary typeJay Berkenbilt
Very badly corrupted files may not have a retrievable root dictionary. Handle that as a special case so that a more helpful error message can be provided.
2017-07-28Add precheck streams capabilityJay Berkenbilt
When requested, QPDFWriter will do more aggress prechecking of streams to make sure it can actually succeed in decoding them before attempting to do so. This will allow preservation of raw data even when the raw data is corrupted relative to the specified filters.
2017-07-28Convert many more errors to warningsJay Berkenbilt
2017-07-28Convert object parsing errors to warningsJay Berkenbilt
QPDFObjectHandle::parseInternal now issues warnings instead of throwing exceptions for all error conditions that it finds (except internal logic errors) and has stronger recovery for things like invalid tokens and malformed dictionaries. This should improve qpdf's ability to recover from a wide range of broken files that currently cause it to fail.
2017-07-26Detect recursion loops resolving objects (fixes #51)Jay Berkenbilt
During parsing of an object, sometimes parts of the object have to be resolved. An example is stream lengths. If such an object directly or indirectly points to the object being parsed, it can cause an infinite loop. Guard against all cases of re-entrant resolution of objects.
2017-07-26Handle object ID 0 (fixes #99)Jay Berkenbilt
This is CVE-2017-9208. The QPDF library uses object ID 0 internally as a sentinel to represent a direct object, but prior to this fix, was not blocking handling of 0 0 obj or 0 0 R as a special case. Creating an object in the file with 0 0 obj could cause various infinite loops. The PDF spec doesn't allow for object 0. Having qpdf handle object 0 might be a better fix, but changing all the places in the code that assumes objid == 0 means direct would be risky.
2017-07-26Avoid xref reconstruction infinite loop (fixes #100)Jay Berkenbilt
This is CVE-2017-9209.
2015-11-10Prepare 6.0.0 releaserelease-qpdf-6.0.0Jay Berkenbilt
2015-11-01Prepare 5.2.0 releaserelease-qpdf-5.2.0Jay Berkenbilt
2015-10-31Tolerate some mangled xref tablesJay Berkenbilt
If xref table entries lack the spec-required trailing whitespace or contain a small amount of extra space, handle them anyway.
2015-10-31Remove trailing whitespaceJay Berkenbilt
2015-05-24Prepare 5.1.3 releaserelease-qpdf-5.1.3Jay Berkenbilt
2014-06-07Prepare 5.1.2 releaserelease-qpdf-5.1.2Jay Berkenbilt
2014-01-14Prepare 5.1.1 releaserelease-qpdf-5.1.1Jay Berkenbilt
2013-12-26Avoid traversing same object twice when copying objectsJay Berkenbilt
This is a performance fix. The output is unchanged. Fixes #28.
2013-12-17Prepare 5.1.0 releaserelease-qpdf-5.1.0Jay Berkenbilt
2013-12-14Allow arbitrary whitespace, not just newline, after xrefJay Berkenbilt
Fixes #27.
2013-11-29Include <algorithm> for std::min, std::maxJay Berkenbilt
2013-10-18Prepare for 5.0.1 releaserelease-qpdf-5.0.1Jay Berkenbilt
2013-10-18Security: replace operator[] with atJay Berkenbilt
For std::string and std::vector, replace operator[] with at. This was done using an automated process. See README.hardening for details.
2013-10-10Security: sanitize /W in xref streamJay Berkenbilt
The /W array was not sanitized, possibly causing an integer overflow in a multiplication. An analysis of the code suggests that there were no possible exploits based on this since the problems were in checking expected values but bounds checks were performed on actual values.
2013-07-10Prepare 5.0.0 releaserelease-qpdf-5.0.0Jay Berkenbilt
2013-07-10Change API/ABI and withdraw 4.2.0Jay Berkenbilt
4.2.0 was binary incompatible in spite of there being no deletions or changes to any public methods. As such, we have to bump the ABI and are fixing some API breakage while we're at it. Previous 4.3.0 target is now 5.1.0.
2013-07-08Prepare 4.2.0 releaserelease-qpdf-4.2.0Jay Berkenbilt
2013-06-15Handle more broken filesJay Berkenbilt
Space rather than newline after xref, missing /ID in trailer for encrypted file. This enables qpdf to handle some files that xpdf can handle. Adobe reader can't necessarily handle them.
2013-06-14Bug fix: handle generation > 0 when generating object streamsJay Berkenbilt
Rework QPDFWriter to always track old object IDs and QPDFObjGen instead of int, thus not discarding the generation number. Switch to QPDF::getCompressibleObjGen() to properly handle the case of an old object eligible for compression that has a generation of other than zero.
2013-06-14Use QPDFObjectHandle::getObjGen() where appropriateJay Berkenbilt
In internal code and examples, replace calls to getObjectID() and getGeneration() with calls to getObjGen() where possible.
2013-06-14Promote QPDF::ObjGen to top-level object QPDFObjGenJay Berkenbilt
2013-04-14Final preparation for 4.1.0 releaserelease-qpdf-4.1.0Jay Berkenbilt
2013-03-04Fix unused local variable warningsJay Berkenbilt
2013-03-04Remove all old-style casts from C++ codeJay Berkenbilt
2013-02-23Bug fix: properly handle overridden compressed objectsJay Berkenbilt
When caching objects in an object stream, only cache objects that still resolve to that stream. See Changelog mod from this commit for details.
generated by cgit v1.2.3-54-g00ecf (git 2.45.2) at 2024-07-08 13:22:21 +0200