Skip to content

SEC: Disallow cross-reference streams with zero-only width values#3791

Merged
stefan6419846 merged 1 commit into
py-pdf:mainfrom
stefan6419846:xref-stream-w000
May 21, 2026
Merged

SEC: Disallow cross-reference streams with zero-only width values#3791
stefan6419846 merged 1 commit into
py-pdf:mainfrom
stefan6419846:xref-stream-w000

Conversation

@stefan6419846

Copy link
Copy Markdown
Collaborator

No description provided.

@stefan6419846 stefan6419846 merged commit 507d7c9 into py-pdf:main May 21, 2026
16 checks passed
@stefan6419846 stefan6419846 deleted the xref-stream-w000 branch May 21, 2026 08:55
@codecov

codecov Bot commented May 21, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.67%. Comparing base (0a8e699) to head (8679f5c).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #3791      +/-   ##
==========================================
- Coverage   97.69%   97.67%   -0.02%     
==========================================
  Files          55       55              
  Lines       10333    10339       +6     
  Branches     1906     1908       +2     
==========================================
+ Hits        10095    10099       +4     
- Misses        133      134       +1     
- Partials      105      106       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

stefan6419846 added a commit that referenced this pull request May 21, 2026
## What's new

### Security (SEC)
- Disallow cross-reference streams with zero-only width values (#3791) by @stefan6419846
- Avoid excessive whitespace in layout mode text extraction (#3790) by @stefan6419846

### New Features (ENH)
- Implement SASLprep (RFC 4013) for AES-256 password normalization (#3780) by @adityamoolya
- CID font resource from font file to encode more characters (#3652) by @PJBrs

### Performance Improvements (PI)
- Optimize retrieval of named destinatinos in reader (#3442) by @larsga

### Bug Fixes (BUG)
- Fix TreeObject.insert_child KeyError on fresh children (#3786) by @Abzaek

### Robustness (ROB)
- AppearanceStream: Also honor user-set font name when not flattening annotations (#3781) by @PJBrs

### Documentation (DOC)
- Block encrypting writer in incremental mode (#3789) by @stefan6419846

[Full Changelog](6.11.0...6.12.0)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant