Six year old PDF loop bug affects most major implementations

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

I recently did some testing of the qpdf library with afl and libfuzzer. I discovered an input sample that would generate a high CPU load spike and eventually after several minutes cause an out of memory error. It looked like the parser was caught in some kind of endless loop. This reminded me of something. In 2011 at the Chaos Communication Camp Andreas Bogk gave a talk about creating a formally…

Read on blog.fuzzing-project.org ↗