search

ydc1992 / peepdf

Automatically exported from code.google.com/p/peepdf
GNU General Public License v3.0
0 stars 1 forks source link

XFA JS decapsulation invalid for invalid xref table #12

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
What steps will reproduce the problem?
1. Get this specially forged PDF:
https://www.virustotal.com/en-gb/file/be9c0025b99f0f8c55f448ba619ba303fc65eba862
cac65a00ea83d480e5efec/analysis/
2. run peepdf -fi filename
3. run js_analysis object 6

What is the expected output? What do you see instead?

Run the JS code the PyV8 .

Because there are XFA tags opening and closing, js emulation fails:

*** Error analysing Javascript: SyntaxError: Unexpected token < (  @ 1 : 0 )  
-> <? xml version = "1.0"

What version of the product are you using? On what operating system?

Version: peepdf 0.2 r203
Ubuntu 12.10

Please provide any additional information below.

Original issue reported on code.google.com by robomotic@gmail.com on 18 Oct 2013 at 2:53

GoogleCodeExporter commented 8 years ago 
Hi!

Using the sample you mention, I cannot reproduce your error. In fact, object 6 
does not contain JS or XFA objects...Maybe are you talking about other sample? 
I would appreciate if you could send the correct sample to peepdf at 
eternal-todo dot com, please.

Thanks!

Original comment by josemigu...@gmail.com on 20 Oct 2013 at 4:40

GoogleCodeExporter commented 8 years ago 
Hello,
that's a quick reply will do that first thing tomorrow once back in the office.
:-p

Original comment by robomotic@gmail.com on 20 Oct 2013 at 6:58

GoogleCodeExporter commented 8 years ago 
Here we go file is attached, obviously pay extra care .

Original comment by robomotic@gmail.com on 21 Oct 2013 at 8:33

GoogleCodeExporter commented 8 years ago 
Ok, got it! Next time better via email, I think ;) I will take a look tonight 
;) Thanks!

Original comment by josemigu...@gmail.com on 21 Oct 2013 at 9:41

GoogleCodeExporter commented 8 years ago

Original comment by josemigu...@gmail.com on 21 Oct 2013 at 6:25

GoogleCodeExporter commented 8 years ago 
This issue was closed by revision r204.

Original comment by josemigu...@gmail.com on 21 Oct 2013 at 6:30

GoogleCodeExporter commented 8 years ago 
Wow that is fast, I have other 30 malformed PDF to test now. :-)

Original comment by robomotic@gmail.com on 21 Oct 2013 at 8:48