2
1
mirror of https://github.com/qpdf/qpdf.git synced 2024-11-17 01:55:09 +00:00
Commit Graph

3527 Commits

Author SHA1 Message Date
m-holger
e76d668219 Add qpdf_fuzzer test case 2024-07-07 23:58:18 +01:00
m-holger
e9df787132
Merge pull request #1231 from m-holger/fuzz
In QPDF::processXRefIndex check number of objects in subsection is > 0
2024-07-07 00:22:52 +01:00
m-holger
c1cd3ec8a0 In QPDF::processXRefIndex check number of objects in subsection is > 0
Fixes oss-fuzz 70055
2024-07-06 16:09:50 +01:00
m-holger
ce2deaf185
Merge pull request #1230 from m-holger/clean-dct-fuzz-changes
Alternative clean dct fuzz changes
2024-07-06 06:10:27 +01:00
Jay Berkenbilt
7d478651d1 Ignore previous commit for git blame 2024-07-05 13:29:19 -04:00
Jay Berkenbilt
d7b909f97d Normalize whitespace in ChangeLog 2024-07-05 13:28:49 -04:00
m-holger
f0ded6bca8 Add test case for self-referential object streams
Previous test case was lost in #1221. Test file was created from
object-stream.pdf by adding a reference to itself into object stream 1 0.
2024-07-04 20:40:47 +01:00
m-holger
edf3509b78 Treat corrupt JPEG streams as unfilterable 2024-07-04 17:06:42 +01:00
Jay Berkenbilt
598268f6ad Add setMaxWarnings rather than using conditional compilation 2024-07-03 15:44:44 +01:00
Jay Berkenbilt
65bd8bc57d Add DCT decompression config methods in favor of compile-time changes
As a rule, we should avoid conditional compilation is it always causes
code paths that are sometimes not even seen lexically by the compiler.
Also, we want the actual code being fuzzed to be as close as possible
to the real code. Conditional compilation is suitable to handle
underlying system differences.

Instead, favor configuration using callbacks or other methods that can
be triggered in the places where they need to be exercised.
2024-07-03 15:43:38 +01:00
m-holger
b45e3420d6
Merge pull request #1228 from m-holger/fuzz7
Add further sanity and loop detection checks
2024-07-02 01:52:14 +01:00
m-holger
a367e56afc In QPDF::resolveObjectsInStream avoid creating xref table entries
Invalid entries are created when objects in the stream do not have
an existing xref entry.
2024-07-02 01:16:23 +01:00
m-holger
6d640c569a Add additional object id sanity checks
Ensure objects with impossibly large ids are ignored.
2024-07-02 01:16:23 +01:00
m-holger
42c511198b Suppress excessive warnings while fuzzing
Add extra fuzz test case and amend memory limit for Pl_DCT.
2024-07-02 01:16:23 +01:00
m-holger
9081ac69cd
Merge pull request #1227 from m-holger/fuzz6
Refine #1225
2024-06-30 01:50:36 +01:00
m-holger
09492eea06
Merge pull request #1226 from m-holger/fuzz5
In QPDFOutlineObjectHelper detect loops in direct children
2024-06-30 01:50:16 +01:00
m-holger
18c52640cc Refine #1225 2024-06-29 14:47:03 +01:00
m-holger
0a081e1f09 In QPDFOutlineObjectHelper detect loops in direct children
Also, add diagnostic messages in qpdf_fuzzer and additional fuzz test case.
2024-06-29 12:38:07 +01:00
m-holger
975fae1667
Merge pull request #1225 from m-holger/fuzz4
Limit memory used for JPEG decompression during fuzzing
2024-06-28 23:13:51 +01:00
m-holger
c93b149b4d Limit memory used for JPEG decompression during fuzzing 2024-06-28 21:15:45 +01:00
m-holger
6ed2880405
Merge pull request #1224 from m-holger/fuzz3
Fix #1170
2024-06-27 08:47:42 +01:00
m-holger
732aab8610
Merge pull request #1222 from m-holger/fuzz2
In PL_DCT add option to limit the size of uncompressed corrupt data
2024-06-27 08:20:01 +01:00
m-holger
8ae3ef28ac Fix #1170
In QPDF::read_xrefEntry add buffer overflow test for first eol character.
Overlong f1 or f2 entries consisting only of zeros could cause a buffer
overflow.

Add fuzz testcase 69913.
2024-06-27 08:17:58 +01:00
m-holger
3d569e2171
Merge pull request #1221 from m-holger/fuzz
Refine handling of severely damaged files
2024-06-27 01:18:37 +01:00
m-holger
d83cf43811 In PL_DCT add option to limit the size of uncompressed corrupt data
Also, apply limit in dct_fuzzer
2024-06-26 11:57:29 +01:00
m-holger
3468ce362d Bump version to 11.10.0 2024-06-26 11:57:02 +01:00
m-holger
4a8c821e3e In QPDF::reconstruct_xref add sanity check for object ids 2024-06-25 15:46:47 +01:00
m-holger
e62973d277 In QPDF check for page tree after reading xref table
Also add new fuzz test case.
2024-06-25 15:18:54 +01:00
m-holger
9ed34aec10
Merge pull request #1216 from m-holger/fuzz
Amend fuzz future
2024-06-22 15:23:39 +01:00
m-holger
fff205dc7f Try moving only files matching *_fuzzer* in fuzzer build 2024-06-22 10:19:30 +01:00
m-holger
af66bf5670 Bump version to 11.9.2 2024-06-21 17:33:38 +01:00
m-holger
295f62f041
Merge pull request #1170 from m-holger/readxref
Refactor QPDF::parse_xrefEntry
2024-06-19 20:08:44 +01:00
m-holger
ce5b864c53
Merge pull request #1201 from m-holger/xref_stream
QPDF::processXRefStream
2024-06-18 20:21:39 +01:00
m-holger
95ef3552da
Merge pull request #1202 from m-holger/wip
Update README-maintainer with wip / modernize qpdf
2024-06-18 19:36:45 +01:00
m-holger
71a4e66d99 Update README-maintainer with wip / modernize qpdf 2024-06-18 17:49:29 +01:00
Jay Berkenbilt
516d88566d
Merge pull request #1214 from jberkenbilt/fuzz-future
Fuzz future
2024-06-18 11:35:59 -04:00
Jay Berkenbilt
aaa6547335 Build all fuzzers with FUTURE=ON and FUTURE=OFF 2024-06-18 11:00:44 -04:00
Jay Berkenbilt
293203ac2d Use more idiomatic OFF and ON with cmake 2024-06-18 10:55:19 -04:00
Jay Berkenbilt
65a415e379 Add additional idea to TODO-pages.md 2024-06-18 09:05:53 -04:00
Jay Berkenbilt
5e121c9690 Handle null form field from annotation (fixes #1189)
A file that has Widget annotations that can't be mapped back to form
fields would crash qpdf json.
2024-06-18 08:51:15 -04:00
Jay Berkenbilt
9106a5e308
Merge pull request #1208 from m-holger/manual
Standardize on "qpdf"
2024-06-10 15:40:57 -04:00
m-holger
08acf8d02b Standardize on "qpdf"
Use "QPDF" only for the QPDF class itself.
2024-06-09 13:07:29 +01:00
Jay Berkenbilt
c03ee7aa66 Prepare 11.9.1 release 2024-06-07 08:39:46 -04:00
Jay Berkenbilt
167057411e Format code 2024-06-07 08:07:51 -04:00
Jay Berkenbilt
ee2571ea3c Fix typo 2024-06-07 08:07:26 -04:00
Jay Berkenbilt
a3b4c9dfb9 README-windows.md: add comments about CLion 2024-06-07 08:05:17 -04:00
Jay Berkenbilt
f770ebf19e Fix line endings in .idea file 2024-06-07 07:49:10 -04:00
Jay Berkenbilt
e8cfadf39f Bump version to 11.9.1 2024-06-07 07:42:08 -04:00
Jay Berkenbilt
d17f11e721 Make QPDF::updateObjectMaps iterative 2024-06-06 15:22:14 -04:00
Jay Berkenbilt
72e3a9688d Add Windows CMake profile
This works with Visual Studio Build Tools 2022 installed.
2024-06-06 12:13:34 -04:00