svn commit: r1927435 - pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser

[tilman]

Author: tilman
Date: Wed Jul 23 11:21:16 2025
New Revision: 1927435

Log:
PDFBOX-6037: avoid OOM, as suggested by David Justamante and Michael Klink

Modified:
   
pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFXrefStreamParser.java

Modified: 
pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFXrefStreamParser.java
==============================================================================
--- 
pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFXrefStreamParser.java
      Wed Jul 23 11:21:12 2025        (r1927434)
+++ 
pdfbox/trunk/pdfbox/src/main/java/org/apache/pdfbox/pdfparser/PDFXrefStreamParser.java
      Wed Jul 23 11:21:16 2025        (r1927435)
@@ -83,6 +83,11 @@ public class PDFXrefStreamParser
         {
             throw new IOException("Incorrect /W array in XRef: " + 
Arrays.toString(w));
         }
+        if (w[0] + w[1] + w[2] > 20)
+        {
+            // PDFBOX-6037
+            throw new IOException("Incorrect /W array in XRef: " + 
Arrays.toString(w));
+        }
 
         COSArray indexArray = stream.getCOSArray(COSName.INDEX);
         if (indexArray == null)