Coverage Report

Created: 2025-06-24 07:01

/src/ghostpdl/pdf/pdf_int.c
Line
Count
Source (jump to first uncovered line)
1
/* Copyright (C) 2018-2025 Artifex Software, Inc.
2
   All Rights Reserved.
3
4
   This software is provided AS-IS with no warranty, either express or
5
   implied.
6
7
   This software is distributed under license and may not be copied,
8
   modified or distributed except as expressly authorized under the terms
9
   of the license contained in the file LICENSE in this distribution.
10
11
   Refer to licensing information at http://www.artifex.com or contact
12
   Artifex Software, Inc.,  39 Mesa Street, Suite 108A, San Francisco,
13
   CA 94129, USA, for further information.
14
*/
15
16
/* The PDF interpreter written in C */
17
18
#include "pdf_int.h"
19
#include "pdf_file.h"
20
#include "strmio.h"
21
#include "stream.h"
22
#include "pdf_misc.h"
23
#include "pdf_path.h"
24
#include "pdf_colour.h"
25
#include "pdf_image.h"
26
#include "pdf_shading.h"
27
#include "pdf_font.h"
28
#include "pdf_font_types.h"
29
#include "pdf_cmap.h"
30
#include "pdf_text.h"
31
#include "pdf_gstate.h"
32
#include "pdf_stack.h"
33
#include "pdf_xref.h"
34
#include "pdf_dict.h"
35
#include "pdf_array.h"
36
#include "pdf_trans.h"
37
#include "pdf_optcontent.h"
38
#include "pdf_sec.h"
39
#include <stdlib.h>
40
41
#include "gsstate.h"    /* for gs_gstate_free */
42
43
/* we use -ve returns for error, 0 for success and +ve for 'take an action' */
44
/* Defining tis return so we do not need to define a new error */
45
93.4M
#define REPAIRED_KEYWORD 1
46
47
/***********************************************************************************/
48
/* 'token' reading functions. Tokens in this sense are PDF logical objects and the */
49
/* related keywords. So that's numbers, booleans, names, strings, dictionaries,    */
50
/* arrays, the  null object and indirect references. The keywords are obj/endobj   */
51
/* stream/endstream, xref, startxref and trailer.                                  */
52
53
/***********************************************************************************/
54
/* Some simple functions to find white space, delimiters and hex bytes             */
55
static bool iswhite(char c)
56
5.56G
{
57
5.56G
    if (c == 0x00 || c == 0x09 || c == 0x0a || c == 0x0c || c == 0x0d || c == 0x20)
58
879M
        return true;
59
4.68G
    else
60
4.68G
        return false;
61
5.56G
}
62
63
static bool isdelimiter(char c)
64
3.02G
{
65
3.02G
    if (c == '/' || c == '(' || c == ')' || c == '[' || c == ']' || c == '<' || c == '>' || c == '{' || c == '}' || c == '%')
66
72.7M
        return true;
67
2.94G
    else
68
2.94G
        return false;
69
3.02G
}
70
71
/* The 'read' functions all return the newly created object on the context's stack
72
 * which means these objects are created with a reference count of 0, and only when
73
 * pushed onto the stack does the reference count become 1, indicating the stack is
74
 * the only reference.
75
 */
76
int pdfi_skip_white(pdf_context *ctx, pdf_c_stream *s)
77
1.23G
{
78
1.23G
    int c;
79
80
1.52G
    do {
81
1.52G
        c = pdfi_read_byte(ctx, s);
82
1.52G
        if (c < 0)
83
377k
            return 0;
84
1.52G
    } while (iswhite(c));
85
86
1.23G
    pdfi_unread_byte(ctx, s, (byte)c);
87
1.23G
    return 0;
88
1.23G
}
89
90
int pdfi_skip_eol(pdf_context *ctx, pdf_c_stream *s)
91
2.86M
{
92
2.86M
    int c;
93
94
3.03M
    do {
95
3.03M
        c = pdfi_read_byte(ctx, s);
96
3.03M
        if (c < 0 || c == 0x0a)
97
1.55M
            return 0;
98
3.03M
    } while (c != 0x0d);
99
1.31M
    c = pdfi_read_byte(ctx, s);
100
1.31M
    if (c == 0x0a)
101
1.31M
        return 0;
102
8.03k
    if (c >= 0)
103
7.94k
        pdfi_unread_byte(ctx, s, (byte)c);
104
8.03k
    pdfi_set_warning(ctx, 0, NULL, W_PDF_STREAM_BAD_KEYWORD, "pdfi_skip_eol", NULL);
105
8.03k
    return 0;
106
1.31M
}
107
108
/* Fast(ish) but inaccurate strtof, with Adobe overflow handling,
109
 * lifted from MuPDF. */
110
static float acrobat_compatible_atof(char *s)
111
126M
{
112
126M
    int neg = 0;
113
126M
    int i = 0;
114
115
138M
    while (*s == '-') {
116
12.5M
        neg = 1;
117
12.5M
        ++s;
118
12.5M
    }
119
126M
    while (*s == '+') {
120
8
        ++s;
121
8
    }
122
123
419M
    while (*s >= '0' && *s <= '9') {
124
        /* We deliberately ignore overflow here.
125
         * Tests show that Acrobat handles * overflows in exactly the same way we do:
126
         * 123450000000000000000678 is read as 678.
127
         */
128
293M
        i = i * 10 + (*s - '0');
129
293M
        ++s;
130
293M
    }
131
132
126M
    if (*s == '.') {
133
125M
        float MAX = (MAX_FLOAT-9)/10;
134
125M
        float v = (float)i;
135
125M
        float n = 0;
136
125M
        float d = 1;
137
125M
        ++s;
138
        /* Bug 705211: Ensure that we don't overflow n here - just ignore any
139
         * trailing digits after this. This will be plenty accurate enough. */
140
548M
        while (*s >= '0' && *s <= '9' && n <= MAX) {
141
422M
            n = 10 * n + (*s - '0');
142
422M
            d = 10 * d;
143
422M
            ++s;
144
422M
        }
145
125M
        v += n / d;
146
125M
        return neg ? -v : v;
147
125M
    } else {
148
101k
        return (float)(neg ? -i : i);
149
101k
    }
150
126M
}
151
152
int pdfi_read_bare_int(pdf_context *ctx, pdf_c_stream *s, int *parsed_int)
153
88.1M
{
154
88.1M
    int index = 0;
155
88.1M
    int int_val = 0;
156
88.1M
    int negative = 0;
157
158
88.1M
restart:
159
88.1M
    pdfi_skip_white(ctx, s);
160
161
374M
    do {
162
374M
        int c = pdfi_read_byte(ctx, s);
163
374M
        if (c == EOFC)
164
3.87k
            break;
165
166
374M
        if (c < 0)
167
29.5k
            return_error(gs_error_ioerror);
168
169
374M
        if (iswhite(c)) {
170
87.9M
            break;
171
286M
        } else if (c == '%' && index == 0) {
172
48.3k
            pdfi_skip_comment(ctx, s);
173
48.3k
            goto restart;
174
286M
        } else if (isdelimiter(c)) {
175
26.1k
            pdfi_unread_byte(ctx, s, (byte)c);
176
26.1k
            break;
177
26.1k
        }
178
179
286M
        if (c >= '0' && c <= '9') {
180
286M
            int_val = int_val*10 + c - '0';
181
286M
        } else if (c == '.') {
182
1.85k
            goto error;
183
242k
        } else if (c == 'e' || c == 'E') {
184
3.55k
            pdfi_log_info(ctx, "pdfi_read_bare_int", (char *)"Invalid number format: scientific notation\n");
185
3.55k
            goto error;
186
239k
        } else if (c == '-') {
187
            /* Any - sign not at the start of the string indicates a malformed number. */
188
781
            if (index != 0 || negative) {
189
137
                pdfi_log_info(ctx, "pdfi_read_bare_int", (char *)"Invalid number format: sign not at the start\n");
190
137
                goto error;
191
137
            }
192
644
            negative = 1;
193
238k
        } else if (c == '+') {
194
152k
            if (index == 0) {
195
                /* Just drop the + it's pointless, and it'll get in the way
196
                 * of our negation handling for floats. */
197
152k
                continue;
198
152k
            } else {
199
124
                pdfi_log_info(ctx, "pdfi_read_bare_int", (char *)"Invalid number format: sign not at the start\n");
200
124
                goto error;
201
124
            }
202
152k
        } else {
203
86.0k
            if (index > 0) {
204
10.9k
                pdfi_log_info(ctx, "pdfi_read_bare_int", (char *)"Invalid number format: Ignoring missing white space while parsing number\n");
205
10.9k
                goto error;
206
10.9k
            }
207
75.0k
            pdfi_unread_byte(ctx, s, (byte)c);
208
75.0k
            goto error;
209
86.0k
        }
210
286M
        if (++index > 255)
211
168
            goto error;
212
286M
    } while(1);
213
214
88.0M
    *parsed_int = negative ? -int_val : int_val;
215
88.0M
    if (ctx->args.pdfdebug)
216
0
        outprintf(ctx->memory, " %d", *parsed_int);
217
88.0M
    return (index > 0);
218
219
91.8k
error:
220
91.8k
    *parsed_int = 0;
221
91.8k
    return_error(gs_error_syntaxerror);
222
88.1M
}
223
224
static int pdfi_read_num(pdf_context *ctx, pdf_c_stream *s, uint32_t indirect_num, uint32_t indirect_gen)
225
333M
{
226
333M
    byte Buffer[256];
227
333M
    unsigned short index = 0;
228
333M
    bool real = false;
229
333M
    bool has_decimal_point = false;
230
333M
    bool has_exponent = false;
231
333M
    unsigned short exponent_index = 0;
232
333M
    pdf_num *num;
233
333M
    int code = 0, malformed = false, doubleneg = false, recovered = false, negative = false, overflowed = false;
234
333M
    unsigned int int_val = 0;
235
333M
    int tenth_max_int = max_int / 10, tenth_max_uint = max_uint / 10;
236
237
333M
    pdfi_skip_white(ctx, s);
238
239
1.76G
    do {
240
1.76G
        int c = pdfi_read_byte(ctx, s);
241
1.76G
        if (c == EOFC) {
242
11.5k
            Buffer[index] = 0x00;
243
11.5k
            break;
244
11.5k
        }
245
246
1.76G
        if (c < 0)
247
4.08k
            return_error(gs_error_ioerror);
248
249
1.76G
        if (iswhite(c)) {
250
294M
            Buffer[index] = 0x00;
251
294M
            break;
252
1.47G
        } else if (isdelimiter(c)) {
253
32.4M
            pdfi_unread_byte(ctx, s, (byte)c);
254
32.4M
            Buffer[index] = 0x00;
255
32.4M
            break;
256
32.4M
        }
257
1.44G
        Buffer[index] = (byte)c;
258
259
1.44G
        if (c >= '0' && c <= '9') {
260
1.27G
            if  (!(malformed && recovered) && !overflowed && !real) {
261
815M
                if ((negative && int_val <= tenth_max_int) || (!negative && int_val <= tenth_max_uint))
262
813M
                    int_val = int_val*10 + c - '0';
263
1.21M
                else {
264
1.21M
                    if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_NUMBEROVERFLOW, "pdfi_read_num", NULL)) < 0) {
265
0
                        return code;
266
0
                    }
267
1.21M
                    overflowed = true;
268
1.21M
                }
269
815M
            }
270
1.27G
        } else if (c == '.') {
271
130M
            if (has_decimal_point == true) {
272
2.95M
                if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_MALFORMEDNUMBER, "pdfi_read_num", NULL)) < 0) {
273
0
                    return code;
274
0
                }
275
2.95M
                malformed = true;
276
127M
            } else {
277
127M
                has_decimal_point = true;
278
127M
                real = true;
279
127M
            }
280
130M
        } else if (c == 'e' || c == 'E') {
281
            /* TODO: technically scientific notation isn't in PDF spec,
282
             * but gs seems to accept it, so we should also?
283
             */
284
496k
            if (has_exponent == true) {
285
67.8k
                if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_MALFORMEDNUMBER, "pdfi_read_num", NULL)) < 0) {
286
0
                    return code;
287
0
                }
288
67.8k
                malformed = true;
289
429k
            } else {
290
429k
                pdfi_set_warning(ctx, 0, NULL, W_PDF_NUM_EXPONENT, "pdfi_read_num", NULL);
291
429k
                has_exponent = true;
292
429k
                exponent_index = index;
293
429k
                real = true;
294
429k
            }
295
33.1M
        } else if (c == '-') {
296
            /* Any - sign not at the start of the string, or just after an exponent
297
             * indicates a malformed number. */
298
26.9M
            if (!(index == 0 || (has_exponent && index == exponent_index+1))) {
299
4.85M
                if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_MALFORMEDNUMBER, "pdfi_read_num", NULL)) < 0) {
300
0
                    return code;
301
0
                }
302
4.85M
                if (Buffer[index - 1] != '-') {
303
                    /* We are parsing a number line 123-56. We should continue parsing, but
304
                     * ignore anything from the second -. */
305
705k
                    malformed = true;
306
705k
                    Buffer[index] = 0;
307
705k
                    recovered = true;
308
705k
                }
309
4.85M
            }
310
26.9M
            if (!has_exponent && !(malformed && recovered)) {
311
26.2M
                doubleneg = negative;
312
26.2M
                negative = 1;
313
26.2M
            }
314
26.9M
        } else if (c == '+') {
315
114k
            if (index == 0 || (has_exponent && index == exponent_index+1)) {
316
                /* Just drop the + it's pointless, and it'll get in the way
317
                 * of our negation handling for floats. */
318
104k
                index--;
319
104k
            } else {
320
9.78k
                if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_MALFORMEDNUMBER, "pdfi_read_num", NULL)) < 0) {
321
0
                    return code;
322
0
                }
323
9.78k
                if (Buffer[index - 1] != '-') {
324
                    /* We are parsing a number line 123-56. We should continue parsing, but
325
                     * ignore anything from the second -. */
326
9.37k
                    malformed = true;
327
9.37k
                    Buffer[index] = 0;
328
9.37k
                    recovered = true;
329
9.37k
                }
330
9.78k
            }
331
6.13M
        } else {
332
6.13M
            if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_MISSINGWHITESPACE, "pdfi_read_num", NULL)) < 0) {
333
0
                return code;
334
0
            }
335
6.13M
            pdfi_unread_byte(ctx, s, (byte)c);
336
6.13M
            Buffer[index] = 0x00;
337
6.13M
            break;
338
6.13M
        }
339
1.43G
        if (++index > 255)
340
53.0k
            return_error(gs_error_syntaxerror);
341
1.43G
    } while(1);
342
343
333M
    if (real && (!malformed || (malformed && recovered)))
344
126M
        code = pdfi_object_alloc(ctx, PDF_REAL, 0, (pdf_obj **)&num);
345
206M
    else
346
206M
        code = pdfi_object_alloc(ctx, PDF_INT, 0, (pdf_obj **)&num);
347
333M
    if (code < 0)
348
0
        return code;
349
350
333M
    if ((malformed && !recovered) || (!real && doubleneg)) {
351
1.73M
        if ((code = pdfi_set_warning_var(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_MALFORMEDNUMBER, "pdfi_read_num", "Treating malformed number %s as 0", Buffer)) < 0) {
352
0
            goto exit;
353
0
        }
354
1.73M
        num->value.i = 0;
355
331M
    } else if (has_exponent) {
356
395k
        float f, exp;
357
395k
        char *p = strstr((const char *)Buffer, "e");
358
359
395k
        if (p == NULL)
360
42.6k
            p = strstr((const char *)Buffer, "E");
361
362
395k
        if (p == NULL) {
363
4.41k
            if ((code = pdfi_set_warning_var(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_MALFORMEDNUMBER, "pdfi_read_num", "Treating malformed float %s as 0", Buffer)) < 0) {
364
0
                goto exit;
365
0
            }
366
4.41k
            num->value.d = 0;
367
391k
        } else {
368
391k
            p++;
369
370
391k
            if (sscanf((char *)p, "%g", &exp) != 1 || exp > 38) {
371
362k
                if ((code = pdfi_set_warning_var(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_MALFORMEDNUMBER, "pdfi_read_num", "Treating malformed float %s as 0", Buffer)) < 0) {
372
0
                    goto exit;
373
0
                }
374
362k
                num->value.d = 0;
375
362k
            } else {
376
29.0k
                if (sscanf((char *)Buffer, "%g", &f) == 1) {
377
28.4k
                    num->value.d = f;
378
28.4k
                } else {
379
585
                    if ((code = pdfi_set_warning_var(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_MALFORMEDNUMBER, "pdfi_read_num", "Treating malformed float %s as 0", Buffer)) < 0) {
380
0
                        goto exit;
381
0
                    }
382
585
                    num->value.d = 0;
383
585
                }
384
29.0k
            }
385
391k
        }
386
331M
    } else if (real) {
387
126M
        num->value.d = acrobat_compatible_atof((char *)Buffer);
388
205M
    } else {
389
        /* The doubleneg case is taken care of above. */
390
205M
        num->value.i = negative ? (int64_t)int_val * -1 : (int64_t)int_val;
391
205M
    }
392
333M
    if (ctx->args.pdfdebug) {
393
0
        if (real)
394
0
            outprintf(ctx->memory, " %f", num->value.d);
395
0
        else
396
0
            outprintf(ctx->memory, " %"PRIi64, num->value.i);
397
0
    }
398
333M
    num->indirect_num = indirect_num;
399
333M
    num->indirect_gen = indirect_gen;
400
401
333M
    code = pdfi_push(ctx, (pdf_obj *)num);
402
403
333M
exit:
404
333M
    if (code < 0)
405
947
        pdfi_free_object((pdf_obj *)num);
406
407
333M
    return code;
408
333M
}
409
410
static int pdfi_read_name(pdf_context *ctx, pdf_c_stream *s, uint32_t indirect_num, uint32_t indirect_gen)
411
99.6M
{
412
99.6M
    char *Buffer, *NewBuf = NULL;
413
99.6M
    unsigned short index = 0;
414
99.6M
    short bytes = 0;
415
99.6M
    uint32_t size = 256;
416
99.6M
    pdf_name *name = NULL;
417
99.6M
    int code;
418
419
99.6M
    Buffer = (char *)gs_alloc_bytes(ctx->memory, size, "pdfi_read_name");
420
99.6M
    if (Buffer == NULL)
421
0
        return_error(gs_error_VMerror);
422
423
733M
    do {
424
733M
        int c = pdfi_read_byte(ctx, s);
425
733M
        if (c < 0)
426
10.4k
            break;
427
428
733M
        if (iswhite((char)c)) {
429
71.0M
            Buffer[index] = 0x00;
430
71.0M
            break;
431
662M
        } else if (isdelimiter((char)c)) {
432
28.5M
            pdfi_unread_byte(ctx, s, (char)c);
433
28.5M
            Buffer[index] = 0x00;
434
28.5M
            break;
435
28.5M
        }
436
634M
        Buffer[index] = (char)c;
437
438
        /* Check for and convert escaped name characters */
439
634M
        if (c == '#') {
440
317k
            byte NumBuf[2];
441
442
317k
            bytes = pdfi_read_bytes(ctx, (byte *)&NumBuf, 1, 2, s);
443
317k
            if (bytes < 2 || (!ishex(NumBuf[0]) || !ishex(NumBuf[1]))) {
444
101k
                pdfi_set_warning(ctx, 0, NULL, W_PDF_BAD_NAME_ESCAPE, "pdfi_read_name", NULL);
445
101k
                pdfi_unread(ctx, s, (byte *)NumBuf, bytes);
446
                /* This leaves the name buffer with a # in it, rather than anything sane! */
447
101k
            }
448
216k
            else
449
216k
                Buffer[index] = (fromhex(NumBuf[0]) << 4) + fromhex(NumBuf[1]);
450
317k
        }
451
452
        /* If we ran out of memory, increase the buffer size */
453
634M
        if (index++ >= size - 1) {
454
82.0k
            NewBuf = (char *)gs_alloc_bytes(ctx->memory, size + 256, "pdfi_read_name");
455
82.0k
            if (NewBuf == NULL) {
456
0
                gs_free_object(ctx->memory, Buffer, "pdfi_read_name error");
457
0
                return_error(gs_error_VMerror);
458
0
            }
459
82.0k
            memcpy(NewBuf, Buffer, size);
460
82.0k
            gs_free_object(ctx->memory, Buffer, "pdfi_read_name");
461
82.0k
            Buffer = NewBuf;
462
82.0k
            size += 256;
463
82.0k
        }
464
634M
    } while(1);
465
466
99.6M
    code = pdfi_object_alloc(ctx, PDF_NAME, index, (pdf_obj **)&name);
467
99.6M
    if (code < 0) {
468
0
        gs_free_object(ctx->memory, Buffer, "pdfi_read_name error");
469
0
        return code;
470
0
    }
471
99.6M
    memcpy(name->data, Buffer, index);
472
99.6M
    name->indirect_num = indirect_num;
473
99.6M
    name->indirect_gen = indirect_gen;
474
475
99.6M
    if (ctx->args.pdfdebug)
476
0
        outprintf(ctx->memory, " /%s", Buffer);
477
478
99.6M
    gs_free_object(ctx->memory, Buffer, "pdfi_read_name");
479
480
99.6M
    code = pdfi_push(ctx, (pdf_obj *)name);
481
482
99.6M
    if (code < 0)
483
0
        pdfi_free_object((pdf_obj *)name);
484
485
99.6M
    return code;
486
99.6M
}
487
488
static int pdfi_read_hexstring(pdf_context *ctx, pdf_c_stream *s, uint32_t indirect_num, uint32_t indirect_gen)
489
3.04M
{
490
3.04M
    char *Buffer, *NewBuf = NULL;
491
3.04M
    unsigned short index = 0;
492
3.04M
    uint32_t size = 256;
493
3.04M
    pdf_string *string = NULL;
494
3.04M
    int code, hex0, hex1;
495
496
3.04M
    Buffer = (char *)gs_alloc_bytes(ctx->memory, size, "pdfi_read_hexstring");
497
3.04M
    if (Buffer == NULL)
498
0
        return_error(gs_error_VMerror);
499
500
3.04M
    if (ctx->args.pdfdebug)
501
0
        outprintf(ctx->memory, " <");
502
503
275M
    do {
504
275M
        do {
505
275M
            hex0 = pdfi_read_byte(ctx, s);
506
275M
            if (hex0 < 0)
507
858
                break;
508
275M
        } while(iswhite(hex0));
509
275M
        if (hex0 < 0)
510
858
            break;
511
512
275M
        if (hex0 == '>')
513
2.67M
            break;
514
515
273M
        if (ctx->args.pdfdebug)
516
0
            outprintf(ctx->memory, "%c", (char)hex0);
517
518
273M
        do {
519
273M
            hex1 = pdfi_read_byte(ctx, s);
520
273M
            if (hex1 < 0)
521
793
                break;
522
273M
        } while(iswhite(hex1));
523
273M
        if (hex1 < 0)
524
793
            break;
525
526
273M
        if (hex1 == '>') {
527
            /* PDF Reference 1.7 page 56:
528
             * "If the final digit of a hexadecimal string is missing that is,
529
             * if there is an odd number of digits the final digit is assumed to be 0."
530
             */
531
44.4k
            hex1 = 0x30;
532
44.4k
            if (!ishex(hex0) || !ishex(hex1)) {
533
2.00k
                code = gs_note_error(gs_error_syntaxerror);
534
2.00k
                goto exit;
535
2.00k
            }
536
42.4k
            Buffer[index] = (fromhex(hex0) << 4) + fromhex(hex1);
537
42.4k
            if (ctx->args.pdfdebug)
538
0
                outprintf(ctx->memory, "%c", hex1);
539
42.4k
            break;
540
44.4k
        }
541
542
273M
        if (!ishex(hex0) || !ishex(hex1)) {
543
316k
            code = gs_note_error(gs_error_syntaxerror);
544
316k
            goto exit;
545
316k
        }
546
547
272M
        if (ctx->args.pdfdebug)
548
0
            outprintf(ctx->memory, "%c", (char)hex1);
549
550
272M
        Buffer[index] = (fromhex(hex0) << 4) + fromhex(hex1);
551
552
272M
        if (index++ >= size - 1) {
553
980k
            NewBuf = (char *)gs_alloc_bytes(ctx->memory, size + 256, "pdfi_read_hexstring");
554
980k
            if (NewBuf == NULL) {
555
0
                code = gs_note_error(gs_error_VMerror);
556
0
                goto exit;
557
0
            }
558
980k
            memcpy(NewBuf, Buffer, size);
559
980k
            gs_free_object(ctx->memory, Buffer, "pdfi_read_hexstring");
560
980k
            Buffer = NewBuf;
561
980k
            size += 256;
562
980k
        }
563
272M
    } while(1);
564
565
2.72M
    if (ctx->args.pdfdebug)
566
0
        outprintf(ctx->memory, ">");
567
568
2.72M
    code = pdfi_object_alloc(ctx, PDF_STRING, index, (pdf_obj **)&string);
569
2.72M
    if (code < 0)
570
0
        goto exit;
571
2.72M
    memcpy(string->data, Buffer, index);
572
2.72M
    string->indirect_num = indirect_num;
573
2.72M
    string->indirect_gen = indirect_gen;
574
575
2.72M
    if (ctx->encryption.is_encrypted && ctx->encryption.decrypt_strings) {
576
2.18k
        code = pdfi_decrypt_string(ctx, string);
577
2.18k
        if (code < 0)
578
0
            return code;
579
2.18k
    }
580
581
2.72M
    code = pdfi_push(ctx, (pdf_obj *)string);
582
2.72M
    if (code < 0)
583
0
        pdfi_free_object((pdf_obj *)string);
584
585
3.04M
 exit:
586
3.04M
    gs_free_object(ctx->memory, Buffer, "pdfi_read_hexstring");
587
3.04M
    return code;
588
2.72M
}
589
590
static int pdfi_read_string(pdf_context *ctx, pdf_c_stream *s, uint32_t indirect_num, uint32_t indirect_gen)
591
23.2M
{
592
23.2M
    char *Buffer, *NewBuf = NULL;
593
23.2M
    unsigned short index = 0;
594
23.2M
    uint32_t size = 256;
595
23.2M
    pdf_string *string = NULL;
596
23.2M
    int c, code, nesting = 0;
597
23.2M
    bool escape = false, skip_eol = false, exit_loop = false;
598
599
23.2M
    Buffer = (char *)gs_alloc_bytes(ctx->memory, size, "pdfi_read_string");
600
23.2M
    if (Buffer == NULL)
601
0
        return_error(gs_error_VMerror);
602
603
906M
    do {
604
906M
        if (index >= size - 1) {
605
1.96M
            NewBuf = (char *)gs_alloc_bytes(ctx->memory, size + 256, "pdfi_read_string");
606
1.96M
            if (NewBuf == NULL) {
607
0
                gs_free_object(ctx->memory, Buffer, "pdfi_read_string error");
608
0
                return_error(gs_error_VMerror);
609
0
            }
610
1.96M
            memcpy(NewBuf, Buffer, size);
611
1.96M
            gs_free_object(ctx->memory, Buffer, "pdfi_read_string");
612
1.96M
            Buffer = NewBuf;
613
1.96M
            size += 256;
614
1.96M
        }
615
616
906M
        c = pdfi_read_byte(ctx, s);
617
618
906M
        if (c < 0) {
619
24.6k
            if (nesting > 0 && (code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_UNESCAPEDSTRING, "pdfi_read_string", NULL) < 0)) {
620
0
                gs_free_object(ctx->memory, Buffer, "pdfi_read_string error");
621
0
                return code;
622
0
            }
623
24.6k
            Buffer[index] = 0x00;
624
24.6k
            break;
625
24.6k
        }
626
627
906M
        if (skip_eol) {
628
14.6M
            if (c == 0x0a || c == 0x0d)
629
2.19M
                continue;
630
12.4M
            skip_eol = false;
631
12.4M
        }
632
904M
        Buffer[index] = (char)c;
633
634
904M
        if (escape) {
635
3.89M
            escape = false;
636
3.89M
            switch (Buffer[index]) {
637
11.3k
                case 0x0a:
638
67.3k
                case 0x0d:
639
67.3k
                    skip_eol = true;
640
67.3k
                    continue;
641
85.8k
                case 'n':
642
85.8k
                    Buffer[index] = 0x0a;
643
85.8k
                    break;
644
86.6k
                case 'r':
645
86.6k
                    Buffer[index] = 0x0d;
646
86.6k
                    break;
647
18.7k
                case 't':
648
18.7k
                    Buffer[index] = 0x09;
649
18.7k
                    break;
650
22.9k
                case 'b':
651
22.9k
                    Buffer[index] = 0x08;
652
22.9k
                    break;
653
23.0k
                case 'f':
654
23.0k
                    Buffer[index] = 0x0c;
655
23.0k
                    break;
656
250k
                case '(':
657
500k
                case ')':
658
593k
                case '\\':
659
593k
                    break;
660
980k
                case '0':
661
999k
                case '1':
662
1.31M
                case '2':
663
1.53M
                case '3':
664
1.54M
                case '4':
665
1.55M
                case '5':
666
1.56M
                case '6':
667
1.57M
                case '7':
668
1.57M
                {
669
                    /* Octal chars can be 1, 2 or 3 chars in length, terminated either
670
                     * by being 3 chars long, EOFC, or a non-octal char. We do not allow
671
                     * line breaks in the middle of octal chars. */
672
1.57M
                    int c1 = pdfi_read_byte(ctx, s);
673
1.57M
                    c -= '0';
674
1.57M
                    if (c1 < 0) {
675
                        /* Nothing to do, or unread */
676
1.57M
                    } else if (c1 < '0' || c1 > '7') {
677
87.7k
                        pdfi_unread_byte(ctx, s, (char)c1);
678
1.48M
                    } else {
679
1.48M
                        c = c*8 + c1 - '0';
680
1.48M
                        c1 = pdfi_read_byte(ctx, s);
681
1.48M
                        if (c1 < 0) {
682
                            /* Nothing to do, or unread */
683
1.48M
                        } else if (c1 < '0' || c1 > '7') {
684
35.7k
                            pdfi_unread_byte(ctx, s, (char)c1);
685
35.7k
                        } else
686
1.45M
                            c = c*8 + c1 - '0';
687
1.48M
                    }
688
1.57M
                    Buffer[index] = c;
689
1.57M
                    break;
690
1.56M
                }
691
1.41M
                default:
692
                    /* PDF Reference, literal strings, if the character following a
693
                     * escape \ character is not recognised, then it is ignored.
694
                     */
695
1.41M
                    escape = false;
696
1.41M
                    index++;
697
1.41M
                    continue;
698
3.89M
            }
699
900M
        } else {
700
900M
            switch(Buffer[index]) {
701
3.44M
                case 0x0d:
702
3.44M
                    Buffer[index] = 0x0a;
703
                    /*fallthrough*/
704
12.4M
                case 0x0a:
705
12.4M
                    skip_eol = true;
706
12.4M
                    break;
707
26.5M
                case ')':
708
26.5M
                    if (nesting == 0) {
709
23.2M
                        Buffer[index] = 0x00;
710
23.2M
                        exit_loop = true;
711
23.2M
                    } else
712
3.29M
                        nesting--;
713
26.5M
                    break;
714
3.89M
                case '\\':
715
3.89M
                    escape = true;
716
3.89M
                    continue;
717
3.92M
                case '(':
718
3.92M
                    nesting++;
719
3.92M
                    break;
720
853M
                default:
721
853M
                    break;
722
900M
            }
723
900M
        }
724
725
899M
        if (exit_loop)
726
23.2M
            break;
727
728
875M
        index++;
729
883M
    } while(1);
730
731
23.2M
    code = pdfi_object_alloc(ctx, PDF_STRING, index, (pdf_obj **)&string);
732
23.2M
    if (code < 0) {
733
0
        gs_free_object(ctx->memory, Buffer, "pdfi_read_name error");
734
0
        return code;
735
0
    }
736
23.2M
    memcpy(string->data, Buffer, index);
737
23.2M
    string->indirect_num = indirect_num;
738
23.2M
    string->indirect_gen = indirect_gen;
739
740
23.2M
    gs_free_object(ctx->memory, Buffer, "pdfi_read_string");
741
742
23.2M
    if (ctx->encryption.is_encrypted && ctx->encryption.decrypt_strings) {
743
13.3k
        code = pdfi_decrypt_string(ctx, string);
744
13.3k
        if (code < 0)
745
0
            return code;
746
13.3k
    }
747
748
23.2M
    if (ctx->args.pdfdebug) {
749
0
        int i;
750
0
        outprintf(ctx->memory, " (");
751
0
        for (i=0;i<string->length;i++)
752
0
            outprintf(ctx->memory, "%c", string->data[i]);
753
0
        outprintf(ctx->memory, ")");
754
0
    }
755
756
23.2M
    code = pdfi_push(ctx, (pdf_obj *)string);
757
23.2M
    if (code < 0) {
758
0
        pdfi_free_object((pdf_obj *)string);
759
0
        pdfi_set_error(ctx, code, NULL, 0, "pdfi_read_string", NULL);
760
0
    }
761
762
23.2M
    return code;
763
23.2M
}
764
765
int pdfi_read_dict(pdf_context *ctx, pdf_c_stream *s, uint32_t indirect_num, uint32_t indirect_gen)
766
9.61k
{
767
9.61k
    int code, depth;
768
769
9.61k
    code = pdfi_read_token(ctx, s, indirect_num, indirect_gen);
770
9.61k
    if (code < 0)
771
10
        return code;
772
9.60k
    if (code == 0)
773
0
        return_error(gs_error_syntaxerror);
774
775
9.60k
    if (pdfi_type_of(ctx->stack_top[-1]) != PDF_DICT_MARK)
776
22
        return_error(gs_error_typecheck);
777
9.58k
    depth = pdfi_count_stack(ctx);
778
779
174k
    do {
780
174k
        code = pdfi_read_token(ctx, s, indirect_num, indirect_gen);
781
174k
        if (code < 0)
782
129
            return code;
783
174k
        if (code == 0)
784
16
            return_error(gs_error_syntaxerror);
785
174k
    } while(pdfi_count_stack(ctx) > depth);
786
9.43k
    return 0;
787
9.58k
}
788
789
int pdfi_skip_comment(pdf_context *ctx, pdf_c_stream *s)
790
1.98M
{
791
1.98M
    int c;
792
793
1.98M
    if (ctx->args.pdfdebug)
794
0
        outprintf (ctx->memory, " %%");
795
796
43.5M
    do {
797
43.5M
        c = pdfi_read_byte(ctx, s);
798
43.5M
        if (c < 0)
799
9.53k
            break;
800
801
43.5M
        if (ctx->args.pdfdebug)
802
0
            outprintf (ctx->memory, "%c", (char)c);
803
804
43.5M
    } while (c != 0x0a && c != 0x0d);
805
806
0
    return 0;
807
1.98M
}
808
809
#define PARAM1(A) # A,
810
#define PARAM2(A,B) A,
811
static const char pdf_token_strings[][10] = {
812
#include "pdf_tokens.h"
813
};
814
815
148M
#define nelems(A) (sizeof(A)/sizeof(A[0]))
816
817
typedef int (*bsearch_comparator)(const void *, const void *);
818
819
int pdfi_read_bare_keyword(pdf_context *ctx, pdf_c_stream *s)
820
4.41M
{
821
4.41M
    byte Buffer[256];
822
4.41M
    int code, index = 0;
823
4.41M
    int c;
824
4.41M
    void *t;
825
826
4.41M
    pdfi_skip_white(ctx, s);
827
828
26.8M
    do {
829
26.8M
        c = pdfi_read_byte(ctx, s);
830
26.8M
        if (c < 0)
831
26.7k
            break;
832
833
26.7M
        if (iswhite(c) || isdelimiter(c)) {
834
4.38M
            pdfi_unread_byte(ctx, s, (byte)c);
835
4.38M
            break;
836
4.38M
        }
837
22.3M
        Buffer[index] = (byte)c;
838
22.3M
        index++;
839
22.3M
    } while (index < 255);
840
841
4.41M
    if (index >= 255 || index == 0) {
842
37.1k
        if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_NOERROR, "pdfi_read_bare_keyword", "")) < 0) {
843
0
            return code;
844
0
        }
845
37.1k
        return TOKEN_INVALID_KEY;
846
37.1k
    }
847
848
4.37M
    Buffer[index] = 0x00;
849
4.37M
    t = bsearch((const void *)Buffer,
850
4.37M
                (const void *)pdf_token_strings[TOKEN_INVALID_KEY+1],
851
4.37M
                nelems(pdf_token_strings)-(TOKEN_INVALID_KEY+1),
852
4.37M
                sizeof(pdf_token_strings[0]),
853
4.37M
                (bsearch_comparator)&strcmp);
854
4.37M
    if (t == NULL)
855
82.7k
        return TOKEN_INVALID_KEY;
856
857
4.29M
    if (ctx->args.pdfdebug)
858
0
        outprintf(ctx->memory, " %s\n", Buffer);
859
860
4.29M
    return (((const char *)t) - pdf_token_strings[0]) / sizeof(pdf_token_strings[0]);
861
4.37M
}
862
863
static pdf_key lookup_keyword(const byte *Buffer)
864
144M
{
865
144M
    void *t = bsearch((const void *)Buffer,
866
144M
                      (const void *)pdf_token_strings[TOKEN_INVALID_KEY+1],
867
144M
                      nelems(pdf_token_strings)-(TOKEN_INVALID_KEY+1),
868
144M
                      sizeof(pdf_token_strings[0]),
869
144M
                      (bsearch_comparator)&strcmp);
870
144M
    if (t == NULL)
871
15.1M
        return TOKEN_NOT_A_KEYWORD;
872
873
129M
    return (pdf_key)((((const char *)t) - pdf_token_strings[0]) /
874
129M
                     sizeof(pdf_token_strings[0]));
875
144M
}
876
877
/* This function is slightly misnamed. We read 'keywords' from
878
 * the stream (including null, true, false and R), and will usually
879
 * return them directly as TOKENs cast to be pointers. In the event
880
 * that we can't match what we parse to a known keyword, we'll
881
 * instead return a PDF_KEYWORD object. In the even that we parse
882
 * an 'R', we will return a PDF_INDIRECT object.
883
 */
884
static int pdfi_read_keyword(pdf_context *ctx, pdf_c_stream *s, uint32_t indirect_num, uint32_t indirect_gen)
885
142M
{
886
142M
    byte Buffer[256];
887
142M
    unsigned short index = 0;
888
142M
    int c, code;
889
142M
    pdf_keyword *keyword;
890
142M
    pdf_key key;
891
892
142M
    pdfi_skip_white(ctx, s);
893
894
564M
    do {
895
564M
        c = pdfi_read_byte(ctx, s);
896
564M
        if (c < 0)
897
237k
            break;
898
899
564M
        if (iswhite(c) || isdelimiter(c)) {
900
141M
            pdfi_unread_byte(ctx, s, (byte)c);
901
141M
            break;
902
141M
        }
903
422M
        Buffer[index] = (byte)c;
904
422M
        index++;
905
422M
    } while (index < 255);
906
907
142M
    if (index >= 255 || index == 0) {
908
333k
        if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_syntaxerror), NULL, 0, "pdfi_read_keyword", NULL) < 0)) {
909
0
            return code;
910
0
        }
911
333k
        key = (index >= 255 ? TOKEN_TOO_LONG : TOKEN_INVALID_KEY);
912
333k
        index = 0;
913
333k
        Buffer[0] = 0;
914
141M
    } else {
915
141M
        Buffer[index] = 0x00;
916
141M
        key = lookup_keyword(Buffer);
917
918
141M
        if (ctx->args.pdfdebug)
919
0
            outprintf(ctx->memory, " %s\n", Buffer);
920
921
141M
        switch (key) {
922
18.5M
            case TOKEN_R:
923
18.5M
            {
924
18.5M
                pdf_indirect_ref *o;
925
18.5M
                uint64_t obj_num;
926
18.5M
                uint32_t gen_num;
927
928
18.5M
                if(pdfi_count_stack(ctx) < 2) {
929
41.7k
                    pdfi_clearstack(ctx);
930
41.7k
                    return_error(gs_error_stackunderflow);
931
41.7k
                }
932
933
18.4M
                if(pdfi_type_of(ctx->stack_top[-1]) != PDF_INT || pdfi_type_of(ctx->stack_top[-2]) != PDF_INT) {
934
55.5k
                    pdfi_clearstack(ctx);
935
55.5k
                    return_error(gs_error_typecheck);
936
55.5k
                }
937
938
18.4M
                gen_num = ((pdf_num *)ctx->stack_top[-1])->value.i;
939
18.4M
                pdfi_pop(ctx, 1);
940
18.4M
                obj_num = ((pdf_num *)ctx->stack_top[-1])->value.i;
941
18.4M
                pdfi_pop(ctx, 1);
942
943
18.4M
                code = pdfi_object_alloc(ctx, PDF_INDIRECT, 0, (pdf_obj **)&o);
944
18.4M
                if (code < 0)
945
0
                    return code;
946
947
18.4M
                o->ref_generation_num = gen_num;
948
18.4M
                o->ref_object_num = obj_num;
949
18.4M
                o->indirect_num = indirect_num;
950
18.4M
                o->indirect_gen = indirect_gen;
951
952
18.4M
                code = pdfi_push(ctx, (pdf_obj *)o);
953
18.4M
                if (code < 0)
954
0
                    pdfi_free_object((pdf_obj *)o);
955
956
18.4M
                return code;
957
18.4M
            }
958
15.1M
            case TOKEN_NOT_A_KEYWORD:
959
                 /* Unexpected keyword found. We'll allocate an object for the buffer below. */
960
15.1M
                 break;
961
2.86M
            case TOKEN_STREAM:
962
2.86M
                code = pdfi_skip_eol(ctx, s);
963
2.86M
                if (code < 0)
964
0
                    return code;
965
                /* fallthrough */
966
3.86M
            case TOKEN_PDF_TRUE:
967
4.29M
            case TOKEN_PDF_FALSE:
968
4.35M
            case TOKEN_null:
969
108M
            default:
970
                /* This is the fast, common exit case. We just push the key
971
                 * onto the stack. No allocation required. No deallocation
972
                 * in the case of error. */
973
108M
                return pdfi_push(ctx, (pdf_obj *)(intptr_t)key);
974
141M
        }
975
141M
    }
976
977
    /* Unexpected keyword. We can't handle this with the fast no-allocation case. */
978
15.5M
    code = pdfi_object_alloc(ctx, PDF_KEYWORD, index, (pdf_obj **)&keyword);
979
15.5M
    if (code < 0)
980
0
        return code;
981
982
15.5M
    if (index)
983
15.1M
        memcpy(keyword->data, Buffer, index);
984
985
    /* keyword->length set as part of allocation. */
986
15.5M
    keyword->indirect_num = indirect_num;
987
15.5M
    keyword->indirect_gen = indirect_gen;
988
989
15.5M
    code = pdfi_push(ctx, (pdf_obj *)keyword);
990
15.5M
    if (code < 0)
991
30
        pdfi_free_object((pdf_obj *)keyword);
992
993
15.5M
    return code;
994
15.5M
}
995
996
/* This function reads from the given stream, at the current offset in the stream,
997
 * a single PDF 'token' and returns it on the stack.
998
 */
999
int pdfi_read_token(pdf_context *ctx, pdf_c_stream *s, uint32_t indirect_num, uint32_t indirect_gen)
1000
660M
{
1001
660M
    int c, code;
1002
1003
664M
rescan:
1004
664M
    pdfi_skip_white(ctx, s);
1005
1006
664M
    c = pdfi_read_byte(ctx, s);
1007
664M
    if (c == EOFC)
1008
318k
        return 0;
1009
664M
    if (c < 0)
1010
14.4k
        return_error(gs_error_ioerror);
1011
1012
664M
    switch(c) {
1013
94.9M
        case 0x30:
1014
146M
        case 0x31:
1015
179M
        case 0x32:
1016
215M
        case 0x33:
1017
242M
        case 0x34:
1018
263M
        case 0x35:
1019
280M
        case 0x36:
1020
294M
        case 0x37:
1021
303M
        case 0x38:
1022
309M
        case 0x39:
1023
309M
        case '+':
1024
331M
        case '-':
1025
333M
        case '.':
1026
333M
            pdfi_unread_byte(ctx, s, (byte)c);
1027
333M
            code = pdfi_read_num(ctx, s, indirect_num, indirect_gen);
1028
333M
            if (code < 0)
1029
58.0k
                return code;
1030
333M
            break;
1031
333M
        case '/':
1032
99.6M
            code = pdfi_read_name(ctx, s, indirect_num, indirect_gen);
1033
99.6M
            if (code < 0)
1034
0
                return code;
1035
99.6M
            return 1;
1036
0
            break;
1037
16.9M
        case '<':
1038
16.9M
            c = pdfi_read_byte(ctx, s);
1039
16.9M
            if (c < 0)
1040
358
                return (gs_error_ioerror);
1041
16.9M
            if (iswhite(c)) {
1042
52.8k
                code = pdfi_skip_white(ctx, s);
1043
52.8k
                if (code < 0)
1044
0
                    return code;
1045
52.8k
                c = pdfi_read_byte(ctx, s);
1046
52.8k
            }
1047
16.9M
            if (c == '<') {
1048
13.2M
                if (ctx->args.pdfdebug)
1049
0
                    outprintf (ctx->memory, " <<\n");
1050
13.2M
                if (ctx->object_nesting < MAX_NESTING_DEPTH) {
1051
12.5M
                    ctx->object_nesting++;
1052
12.5M
                    code = pdfi_mark_stack(ctx, PDF_DICT_MARK);
1053
12.5M
                    if (code < 0)
1054
1
                        return code;
1055
12.5M
                }
1056
733k
                else if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_limitcheck), NULL, E_PDF_NESTEDTOODEEP, "pdfi_read_token", NULL) < 0)) {
1057
0
                    return code;
1058
0
                }
1059
13.2M
                return 1;
1060
13.2M
            } else if (c == '>') {
1061
32.5k
                pdfi_unread_byte(ctx, s, (byte)c);
1062
32.5k
                code = pdfi_read_hexstring(ctx, s, indirect_num, indirect_gen);
1063
32.5k
                if (code < 0)
1064
0
                    return code;
1065
32.5k
                return 1;
1066
3.68M
            } else if (ishex(c)) {
1067
3.00M
                pdfi_unread_byte(ctx, s, (byte)c);
1068
3.00M
                code = pdfi_read_hexstring(ctx, s, indirect_num, indirect_gen);
1069
3.00M
                if (code < 0)
1070
318k
                    return code;
1071
3.00M
            }
1072
676k
            else
1073
676k
                return_error(gs_error_syntaxerror);
1074
2.69M
            break;
1075
13.8M
        case '>':
1076
13.8M
            c = pdfi_read_byte(ctx, s);
1077
13.8M
            if (c < 0)
1078
559
                return (gs_error_ioerror);
1079
13.8M
            if (c == '>') {
1080
12.8M
                if (ctx->object_nesting > 0) {
1081
12.0M
                    ctx->object_nesting--;
1082
12.0M
                    code = pdfi_dict_from_stack(ctx, indirect_num, indirect_gen, false);
1083
12.0M
                    if (code < 0)
1084
404k
                        return code;
1085
12.0M
                } else {
1086
810k
                    if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_unmatchedmark), NULL, E_PDF_UNMATCHEDMARK, "pdfi_read_token", NULL) < 0)) {
1087
0
                        return code;
1088
0
                    }
1089
810k
                    goto rescan;
1090
810k
                }
1091
11.6M
                return 1;
1092
12.8M
            } else {
1093
951k
                pdfi_unread_byte(ctx, s, (byte)c);
1094
951k
                return_error(gs_error_syntaxerror);
1095
951k
            }
1096
0
            break;
1097
23.2M
        case '(':
1098
23.2M
            code = pdfi_read_string(ctx, s, indirect_num, indirect_gen);
1099
23.2M
            if (code < 0)
1100
0
                return code;
1101
23.2M
            return 1;
1102
0
            break;
1103
16.2M
        case '[':
1104
16.2M
            if (ctx->args.pdfdebug)
1105
0
                outprintf (ctx->memory, "[");
1106
16.2M
            if (ctx->object_nesting < MAX_NESTING_DEPTH) {
1107
14.9M
                ctx->object_nesting++;
1108
14.9M
                code = pdfi_mark_stack(ctx, PDF_ARRAY_MARK);
1109
14.9M
                if (code < 0)
1110
0
                    return code;
1111
14.9M
            } else
1112
1.31M
                if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_NESTEDTOODEEP, "pdfi_read_token", NULL)) < 0)
1113
0
                    return code;
1114
16.2M
            return 1;
1115
0
            break;
1116
15.1M
        case ']':
1117
15.1M
            if (ctx->object_nesting > 0) {
1118
14.8M
                ctx->object_nesting--;
1119
14.8M
                code = pdfi_array_from_stack(ctx, indirect_num, indirect_gen);
1120
14.8M
                if (code < 0)
1121
242k
                    return code;
1122
14.8M
            } else {
1123
333k
                if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_unmatchedmark), NULL, E_PDF_UNMATCHEDMARK, "pdfi_read_token", NULL) < 0)) {
1124
0
                    return code;
1125
0
                }
1126
333k
                goto rescan;
1127
333k
            }
1128
14.5M
            break;
1129
14.5M
        case '{':
1130
332k
            if (ctx->args.pdfdebug)
1131
0
                outprintf (ctx->memory, "{");
1132
332k
            code = pdfi_mark_stack(ctx, PDF_PROC_MARK);
1133
332k
            if (code < 0)
1134
0
                return code;
1135
332k
            return 1;
1136
0
            break;
1137
275k
        case '}':
1138
275k
            pdfi_clear_to_mark(ctx);
1139
275k
            goto rescan;
1140
0
            break;
1141
1.85M
        case '%':
1142
1.85M
            pdfi_skip_comment(ctx, s);
1143
1.85M
            goto rescan;
1144
0
            break;
1145
143M
        default:
1146
143M
            if (isdelimiter(c)) {
1147
865k
                if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_syntaxerror), NULL, 0, "pdfi_read_token", NULL) < 0)) {
1148
0
                    return code;
1149
0
                }
1150
865k
                goto rescan;
1151
865k
            }
1152
142M
            pdfi_unread_byte(ctx, s, (byte)c);
1153
142M
            code = pdfi_read_keyword(ctx, s, indirect_num, indirect_gen);
1154
142M
            if (code < 0)
1155
97.4k
                return code;
1156
142M
            return 1;
1157
0
            break;
1158
664M
    }
1159
350M
    return 1;
1160
664M
}
1161
1162
/* In contrast to the 'read' functions, the 'make' functions create an object with a
1163
 * reference count of 1. This indicates that the caller holds the reference. Thus the
1164
 * caller need not increment the reference count to the object, but must decrement
1165
 * it (pdf_countdown) before exiting.
1166
 */
1167
int pdfi_name_alloc(pdf_context *ctx, byte *n, uint32_t size, pdf_obj **o)
1168
184M
{
1169
184M
    int code;
1170
184M
    *o = NULL;
1171
1172
184M
    code = pdfi_object_alloc(ctx, PDF_NAME, size, o);
1173
184M
    if (code < 0)
1174
0
        return code;
1175
1176
184M
    memcpy(((pdf_name *)*o)->data, n, size);
1177
1178
184M
    return 0;
1179
184M
}
1180
1181
static char op_table_3[5][3] = {
1182
    "BDC", "BMC", "EMC", "SCN", "scn"
1183
};
1184
1185
static char op_table_2[39][2] = {
1186
    "b*", "BI", "BT", "BX", "cm", "CS", "cs", "EI", "d0", "d1", "Do", "DP", "ET", "EX", "f*", "gs", "ID", "MP", "re", "RG",
1187
    "rg", "ri", "SC", "sc", "sh", "T*", "Tc", "Td", "TD", "Tf", "Tj", "TJ", "TL", "Tm", "Tr", "Ts", "Tw", "Tz", "W*",
1188
};
1189
1190
static char op_table_1[27][1] = {
1191
    "b", "B", "c", "d", "f", "F", "G", "g", "h", "i", "j", "J", "K", "k", "l", "m", "n", "q", "Q", "s", "S", "v", "w", "W",
1192
    "y", "'", "\""
1193
};
1194
1195
/* forward definition for the 'split_bogus_operator' function to use */
1196
static int pdfi_interpret_stream_operator(pdf_context *ctx, pdf_c_stream *source,
1197
                                          pdf_dict *stream_dict, pdf_dict *page_dict);
1198
1199
static int
1200
make_keyword_obj(pdf_context *ctx, const byte *data, int length, pdf_keyword **pkey)
1201
2.37M
{
1202
2.37M
    byte Buffer[256];
1203
2.37M
    pdf_key key;
1204
2.37M
    int code;
1205
1206
2.37M
    if (length > 255)
1207
0
        return_error(gs_error_rangecheck);
1208
1209
2.37M
    memcpy(Buffer, data, length);
1210
2.37M
    Buffer[length] = 0;
1211
2.37M
    key = lookup_keyword(Buffer);
1212
2.37M
    if (key != TOKEN_INVALID_KEY) {
1213
        /* The common case. We've found a real key, just cast the token to
1214
         * a pointer, and return that. */
1215
2.37M
        *pkey = (pdf_keyword *)PDF_TOKEN_AS_OBJ(key);
1216
2.37M
        return 1;
1217
2.37M
    }
1218
    /* We still haven't found a real keyword. Allocate a new object and
1219
     * return it. */
1220
0
    code = pdfi_object_alloc(ctx, PDF_KEYWORD, length, (pdf_obj **)pkey);
1221
0
    if (code < 0)
1222
0
        return code;
1223
0
    if (length)
1224
0
        memcpy((*pkey)->data, Buffer, length);
1225
0
    pdfi_countup(*pkey);
1226
1227
0
    return 1;
1228
0
}
1229
1230
static int search_table_3(pdf_context *ctx, unsigned char *str, pdf_keyword **key)
1231
2.33M
{
1232
2.33M
    int i;
1233
1234
13.9M
    for (i = 0; i < 5; i++) {
1235
11.6M
        if (memcmp(str, op_table_3[i], 3) == 0)
1236
10.0k
            return make_keyword_obj(ctx, str, 3, key);
1237
11.6M
    }
1238
2.32M
    return 0;
1239
2.33M
}
1240
1241
static int search_table_2(pdf_context *ctx, unsigned char *str, pdf_keyword **key)
1242
5.02M
{
1243
5.02M
    int i;
1244
1245
194M
    for (i = 0; i < 39; i++) {
1246
189M
        if (memcmp(str, op_table_2[i], 2) == 0)
1247
312k
            return make_keyword_obj(ctx, str, 2, key);
1248
189M
    }
1249
4.71M
    return 0;
1250
5.02M
}
1251
1252
static int search_table_1(pdf_context *ctx, unsigned char *str, pdf_keyword **key)
1253
4.58M
{
1254
4.58M
    int i;
1255
1256
99.3M
    for (i = 0; i < 27; i++) {
1257
96.7M
        if (memcmp(str, op_table_1[i], 1) == 0)
1258
2.05M
            return make_keyword_obj(ctx, str, 1, key);
1259
96.7M
    }
1260
2.53M
    return 0;
1261
4.58M
}
1262
1263
static int split_bogus_operator(pdf_context *ctx, pdf_c_stream *source, pdf_dict *stream_dict, pdf_dict *page_dict)
1264
8.91M
{
1265
8.91M
    int code = 0;
1266
8.91M
    pdf_keyword *keyword = (pdf_keyword *)ctx->stack_top[-1], *key1 = NULL, *key2 = NULL;
1267
8.91M
    int length = keyword->length - 6;
1268
1269
8.91M
    if (length > 0) {
1270
        /* Longer than 2 3-character operators, we only allow for up to two
1271
         * operators. Check to see if it includes an endstream or endobj.
1272
         */
1273
2.95M
        if (memcmp(&keyword->data[length], "endobj", 6) == 0) {
1274
            /* Keyword is "<something>endobj". So make a keyword just from
1275
             * <something>, push that, execute it, then push endobj. */
1276
47
            code = make_keyword_obj(ctx, keyword->data, length, &key1);
1277
47
            if (code < 0)
1278
0
                goto error_exit;
1279
47
            pdfi_pop(ctx, 1);
1280
47
            pdfi_push(ctx, (pdf_obj *)key1);
1281
47
            pdfi_countdown(key1); /* Drop the reference returned by make_keyword_obj. */
1282
47
            code = pdfi_interpret_stream_operator(ctx, source, stream_dict, page_dict);
1283
47
            if (code < 0)
1284
34
                goto error_exit;
1285
13
            pdfi_push(ctx, PDF_TOKEN_AS_OBJ(TOKEN_ENDOBJ));
1286
13
            return 0;
1287
2.95M
        } else {
1288
2.95M
            length = keyword->length - 9;
1289
2.95M
            if (length > 0 && memcmp(&keyword->data[length], "endstream", 9) == 0) {
1290
                /* Keyword is "<something>endstream". So make a keyword just from
1291
                 * <something>, push that, execute it, then push endstream. */
1292
1
                code = make_keyword_obj(ctx, keyword->data, length, &key1);
1293
1
                if (code < 0)
1294
0
                    goto error_exit;
1295
1
                pdfi_pop(ctx, 1);
1296
1
                pdfi_push(ctx, (pdf_obj *)key1);
1297
1
                pdfi_countdown(key1); /* Drop the reference returned by make_keyword_obj. */
1298
1
                code = pdfi_interpret_stream_operator(ctx, source, stream_dict, page_dict);
1299
1
                if (code < 0)
1300
0
                    goto error_exit;
1301
1
                pdfi_push(ctx, PDF_TOKEN_AS_OBJ(TOKEN_ENDSTREAM));
1302
1
                return 0;
1303
2.95M
            } else {
1304
2.95M
                pdfi_clearstack(ctx);
1305
2.95M
                return 0;
1306
2.95M
            }
1307
2.95M
        }
1308
2.95M
    }
1309
1310
5.95M
    if (keyword->length > 3) {
1311
1.83M
        code = search_table_3(ctx, keyword->data, &key1);
1312
1.83M
        if (code < 0)
1313
0
            goto error_exit;
1314
1315
1.83M
        if (code > 0) {
1316
8.55k
            switch (keyword->length - 3) {
1317
6.79k
                case 1:
1318
6.79k
                    code = search_table_1(ctx, &keyword->data[3], &key2);
1319
6.79k
                    break;
1320
936
                case 2:
1321
936
                    code = search_table_2(ctx, &keyword->data[3], &key2);
1322
936
                    break;
1323
832
                case 3:
1324
832
                    code = search_table_3(ctx, &keyword->data[3], &key2);
1325
832
                    break;
1326
0
                default:
1327
0
                    goto error_exit;
1328
8.55k
            }
1329
8.55k
        }
1330
1.83M
        if (code < 0)
1331
0
            goto error_exit;
1332
1.83M
        if (code > 0)
1333
1.85k
            goto match;
1334
1.83M
    }
1335
5.95M
    pdfi_countdown(key1);
1336
5.95M
    pdfi_countdown(key2);
1337
5.95M
    key1 = NULL;
1338
5.95M
    key2 = NULL;
1339
1340
5.95M
    if (keyword->length > 5 || keyword->length < 2)
1341
1.56M
        goto error_exit;
1342
1343
4.39M
    code = search_table_2(ctx, keyword->data, &key1);
1344
4.39M
    if (code < 0)
1345
0
        goto error_exit;
1346
1347
4.39M
    if (code > 0) {
1348
265k
        switch(keyword->length - 2) {
1349
111k
            case 1:
1350
111k
                code = search_table_1(ctx, &keyword->data[2], &key2);
1351
111k
                break;
1352
100k
            case 2:
1353
100k
                code = search_table_2(ctx, &keyword->data[2], &key2);
1354
100k
                break;
1355
53.4k
            case 3:
1356
53.4k
                code = search_table_3(ctx, &keyword->data[2], &key2);
1357
53.4k
                break;
1358
0
            default:
1359
0
                goto error_exit;
1360
265k
        }
1361
265k
        if (code < 0)
1362
0
            goto error_exit;
1363
265k
        if (code > 0)
1364
46.4k
            goto match;
1365
265k
    }
1366
4.34M
    pdfi_countdown(key1);
1367
4.34M
    pdfi_countdown(key2);
1368
4.34M
    key1 = NULL;
1369
4.34M
    key2 = NULL;
1370
1371
4.34M
    if (keyword->length > 4)
1372
675k
        goto error_exit;
1373
1374
3.67M
    code = search_table_1(ctx, keyword->data, &key1);
1375
3.67M
    if (code <= 0)
1376
1.90M
        goto error_exit;
1377
1378
1.77M
    switch(keyword->length - 1) {
1379
798k
        case 1:
1380
798k
            code = search_table_1(ctx, &keyword->data[1], &key2);
1381
798k
            break;
1382
528k
        case 2:
1383
528k
            code = search_table_2(ctx, &keyword->data[1], &key2);
1384
528k
            break;
1385
443k
        case 3:
1386
443k
            code = search_table_3(ctx, &keyword->data[1], &key2);
1387
443k
            break;
1388
0
        default:
1389
0
            goto error_exit;
1390
1.77M
    }
1391
1.77M
    if (code <= 0)
1392
1.48M
        goto error_exit;
1393
1394
335k
match:
1395
335k
    pdfi_set_warning(ctx, 0, NULL, W_PDF_MISSING_WHITE_OPS, "split_bogus_operator", NULL);
1396
    /* If we get here, we have two PDF_KEYWORD objects. We push them on the stack
1397
     * one at a time, and execute them.
1398
     */
1399
335k
    pdfi_push(ctx, (pdf_obj *)key1);
1400
335k
    code = pdfi_interpret_stream_operator(ctx, source, stream_dict, page_dict);
1401
335k
    if (code < 0)
1402
255k
        goto error_exit;
1403
1404
79.6k
    pdfi_push(ctx, (pdf_obj *)key2);
1405
79.6k
    code = pdfi_interpret_stream_operator(ctx, source, stream_dict, page_dict);
1406
1407
79.6k
    pdfi_countdown(key1);
1408
79.6k
    pdfi_countdown(key2);
1409
79.6k
    pdfi_clearstack(ctx);
1410
79.6k
    return code;
1411
1412
5.88M
error_exit:
1413
5.88M
    pdfi_set_error(ctx, code, NULL, E_PDF_TOKENERROR, "split_bogus_operator", NULL);
1414
5.88M
    pdfi_countdown(key1);
1415
5.88M
    pdfi_countdown(key2);
1416
5.88M
    pdfi_clearstack(ctx);
1417
5.88M
    return code;
1418
335k
}
1419
1420
static int pdfi_interpret_stream_operator(pdf_context *ctx, pdf_c_stream *source,
1421
                                          pdf_dict *stream_dict, pdf_dict *page_dict)
1422
93.9M
{
1423
93.9M
    pdf_obj *keyword = ctx->stack_top[-1];
1424
93.9M
    int code = 0;
1425
1426
93.9M
    if (keyword < PDF_TOKEN_AS_OBJ(TOKEN__LAST_KEY))
1427
85.0M
    {
1428
85.0M
        switch((uintptr_t)keyword) {
1429
13.9k
            case TOKEN_b:           /* closepath, fill, stroke */
1430
13.9k
                pdfi_pop(ctx, 1);
1431
13.9k
                code = pdfi_b(ctx);
1432
13.9k
                break;
1433
45.1k
            case TOKEN_B:           /* fill, stroke */
1434
45.1k
                pdfi_pop(ctx, 1);
1435
45.1k
                code = pdfi_B(ctx);
1436
45.1k
                break;
1437
447
            case TOKEN_bstar:       /* closepath, eofill, stroke */
1438
447
                pdfi_pop(ctx, 1);
1439
447
                code = pdfi_b_star(ctx);
1440
447
                break;
1441
1.74k
            case TOKEN_Bstar:       /* eofill, stroke */
1442
1.74k
                pdfi_pop(ctx, 1);
1443
1.74k
                code = pdfi_B_star(ctx);
1444
1.74k
                break;
1445
242k
            case TOKEN_BI:       /* begin inline image */
1446
242k
                pdfi_pop(ctx, 1);
1447
242k
                code = pdfi_BI(ctx);
1448
242k
                break;
1449
509k
            case TOKEN_BDC:   /* begin marked content sequence with property list */
1450
509k
                pdfi_pop(ctx, 1);
1451
509k
                code = pdfi_op_BDC(ctx, stream_dict, page_dict);
1452
509k
                break;
1453
23.3k
            case TOKEN_BMC:   /* begin marked content sequence */
1454
23.3k
                pdfi_pop(ctx, 1);
1455
23.3k
                code = pdfi_op_BMC(ctx);
1456
23.3k
                break;
1457
2.85M
            case TOKEN_BT:       /* begin text */
1458
2.85M
                pdfi_pop(ctx, 1);
1459
2.85M
                code = pdfi_BT(ctx);
1460
2.85M
                break;
1461
112k
            case TOKEN_BX:       /* begin compatibility section */
1462
112k
                pdfi_pop(ctx, 1);
1463
112k
                break;
1464
7.24M
            case TOKEN_c:           /* curveto */
1465
7.24M
                pdfi_pop(ctx, 1);
1466
7.24M
                code = pdfi_curveto(ctx);
1467
7.24M
                break;
1468
3.26M
            case TOKEN_cm:       /* concat */
1469
3.26M
                pdfi_pop(ctx, 1);
1470
3.26M
                code = pdfi_concat(ctx);
1471
3.26M
                break;
1472
65.1k
            case TOKEN_CS:       /* set stroke colour space */
1473
65.1k
                pdfi_pop(ctx, 1);
1474
65.1k
                code = pdfi_setstrokecolor_space(ctx, stream_dict, page_dict);
1475
65.1k
                break;
1476
336k
            case TOKEN_cs:       /* set non-stroke colour space */
1477
336k
                pdfi_pop(ctx, 1);
1478
336k
                code = pdfi_setfillcolor_space(ctx, stream_dict, page_dict);
1479
336k
                break;
1480
938k
            case TOKEN_d:           /* set dash params */
1481
938k
                pdfi_pop(ctx, 1);
1482
938k
                code = pdfi_setdash(ctx);
1483
938k
                break;
1484
3.46k
            case TOKEN_d0:       /* set type 3 font glyph width */
1485
3.46k
                pdfi_pop(ctx, 1);
1486
3.46k
                code = pdfi_d0(ctx);
1487
3.46k
                break;
1488
41.4k
            case TOKEN_d1:       /* set type 3 font glyph width and bounding box */
1489
41.4k
                pdfi_pop(ctx, 1);
1490
41.4k
                code = pdfi_d1(ctx);
1491
41.4k
                break;
1492
322k
            case TOKEN_Do:       /* invoke named XObject */
1493
322k
                pdfi_pop(ctx, 1);
1494
322k
                code = pdfi_Do(ctx, stream_dict, page_dict);
1495
322k
                break;
1496
335
            case TOKEN_DP:       /* define marked content point with property list */
1497
335
                pdfi_pop(ctx, 1);
1498
335
                code = pdfi_op_DP(ctx, stream_dict, page_dict);
1499
335
                break;
1500
237k
            case TOKEN_EI:       /* end inline image */
1501
237k
                pdfi_pop(ctx, 1);
1502
237k
                code = pdfi_EI(ctx);
1503
237k
                break;
1504
2.78M
            case TOKEN_ET:       /* end text */
1505
2.78M
                pdfi_pop(ctx, 1);
1506
2.78M
                code = pdfi_ET(ctx);
1507
2.78M
                break;
1508
523k
            case TOKEN_EMC:   /* end marked content sequence */
1509
523k
                pdfi_pop(ctx, 1);
1510
523k
                code = pdfi_op_EMC(ctx);
1511
523k
                break;
1512
110k
            case TOKEN_EX:       /* end compatibility section */
1513
110k
                pdfi_pop(ctx, 1);
1514
110k
                break;
1515
2.12M
            case TOKEN_f:           /* fill */
1516
2.12M
                pdfi_pop(ctx, 1);
1517
2.12M
                code = pdfi_fill(ctx);
1518
2.12M
                break;
1519
16.7k
            case TOKEN_F:           /* fill (obselete operator) */
1520
16.7k
                pdfi_pop(ctx, 1);
1521
16.7k
                code = pdfi_fill(ctx);
1522
16.7k
                break;
1523
75.9k
            case TOKEN_fstar:       /* eofill */
1524
75.9k
                pdfi_pop(ctx, 1);
1525
75.9k
                code = pdfi_eofill(ctx);
1526
75.9k
                break;
1527
659k
            case TOKEN_G:           /* setgray for stroke */
1528
659k
                pdfi_pop(ctx, 1);
1529
659k
                code = pdfi_setgraystroke(ctx);
1530
659k
                break;
1531
863k
            case TOKEN_g:           /* setgray for non-stroke */
1532
863k
                pdfi_pop(ctx, 1);
1533
863k
                code = pdfi_setgrayfill(ctx);
1534
863k
                break;
1535
557k
            case TOKEN_gs:       /* set graphics state from dictionary */
1536
557k
                pdfi_pop(ctx, 1);
1537
557k
                code = pdfi_setgstate(ctx, stream_dict, page_dict);
1538
557k
                break;
1539
800k
            case TOKEN_h:           /* closepath */
1540
800k
                pdfi_pop(ctx, 1);
1541
800k
                code = pdfi_closepath(ctx);
1542
800k
                break;
1543
321k
            case TOKEN_i:           /* setflat */
1544
321k
                pdfi_pop(ctx, 1);
1545
321k
                code = pdfi_setflat(ctx);
1546
321k
                break;
1547
242k
            case TOKEN_ID:       /* begin inline image data */
1548
242k
                pdfi_pop(ctx, 1);
1549
242k
                code = pdfi_ID(ctx, stream_dict, page_dict, source);
1550
242k
                break;
1551
1.04M
            case TOKEN_j:           /* setlinejoin */
1552
1.04M
                pdfi_pop(ctx, 1);
1553
1.04M
                code = pdfi_setlinejoin(ctx);
1554
1.04M
                break;
1555
1.16M
            case TOKEN_J:           /* setlinecap */
1556
1.16M
                pdfi_pop(ctx, 1);
1557
1.16M
                code = pdfi_setlinecap(ctx);
1558
1.16M
                break;
1559
43.3k
            case TOKEN_K:           /* setcmyk for non-stroke */
1560
43.3k
                pdfi_pop(ctx, 1);
1561
43.3k
                code = pdfi_setcmykstroke(ctx);
1562
43.3k
                break;
1563
133k
            case TOKEN_k:           /* setcmyk for non-stroke */
1564
133k
                pdfi_pop(ctx, 1);
1565
133k
                code = pdfi_setcmykfill(ctx);
1566
133k
                break;
1567
11.6M
            case TOKEN_l:           /* lineto */
1568
11.6M
                pdfi_pop(ctx, 1);
1569
11.6M
                code = pdfi_lineto(ctx);
1570
11.6M
                break;
1571
6.43M
            case TOKEN_m:           /* moveto */
1572
6.43M
                pdfi_pop(ctx, 1);
1573
6.43M
                code = pdfi_moveto(ctx);
1574
6.43M
                break;
1575
48.5k
            case TOKEN_M:           /* setmiterlimit */
1576
48.5k
                pdfi_pop(ctx, 1);
1577
48.5k
                code = pdfi_setmiterlimit(ctx);
1578
48.5k
                break;
1579
2.86k
            case TOKEN_MP:       /* define marked content point */
1580
2.86k
                pdfi_pop(ctx, 1);
1581
2.86k
                code = pdfi_op_MP(ctx);
1582
2.86k
                break;
1583
1.45M
            case TOKEN_n:           /* newpath */
1584
1.45M
                pdfi_pop(ctx, 1);
1585
1.45M
                code = pdfi_newpath(ctx);
1586
1.45M
                break;
1587
4.45M
            case TOKEN_q:           /* gsave */
1588
4.45M
                pdfi_pop(ctx, 1);
1589
4.45M
                code = pdfi_op_q(ctx);
1590
4.45M
                break;
1591
4.49M
            case TOKEN_Q:           /* grestore */
1592
4.49M
                pdfi_pop(ctx, 1);
1593
4.49M
                code = pdfi_op_Q(ctx);
1594
4.49M
                break;
1595
53.6k
            case TOKEN_r:       /* non-standard set rgb colour for non-stroke */
1596
53.6k
                pdfi_pop(ctx, 1);
1597
53.6k
                code = pdfi_setrgbfill_array(ctx);
1598
53.6k
                break;
1599
3.50M
            case TOKEN_re:       /* append rectangle */
1600
3.50M
                pdfi_pop(ctx, 1);
1601
3.50M
                code = pdfi_rectpath(ctx);
1602
3.50M
                break;
1603
938k
            case TOKEN_RG:       /* set rgb colour for stroke */
1604
938k
                pdfi_pop(ctx, 1);
1605
938k
                code = pdfi_setrgbstroke(ctx);
1606
938k
                break;
1607
1.34M
            case TOKEN_rg:       /* set rgb colour for non-stroke */
1608
1.34M
                pdfi_pop(ctx, 1);
1609
1.34M
                code = pdfi_setrgbfill(ctx);
1610
1.34M
                break;
1611
164k
            case TOKEN_ri:       /* set rendering intent */
1612
164k
                pdfi_pop(ctx, 1);
1613
164k
                code = pdfi_ri(ctx);
1614
164k
                break;
1615
82.8k
            case TOKEN_s:           /* closepath, stroke */
1616
82.8k
                pdfi_pop(ctx, 1);
1617
82.8k
                code = pdfi_closepath_stroke(ctx);
1618
82.8k
                break;
1619
3.67M
            case TOKEN_S:           /* stroke */
1620
3.67M
                pdfi_pop(ctx, 1);
1621
3.67M
                code = pdfi_stroke(ctx);
1622
3.67M
                break;
1623
78.6k
            case TOKEN_SC:       /* set colour for stroke */
1624
78.6k
                pdfi_pop(ctx, 1);
1625
78.6k
                code = pdfi_setstrokecolor(ctx);
1626
78.6k
                break;
1627
245k
            case TOKEN_sc:       /* set colour for non-stroke */
1628
245k
                pdfi_pop(ctx, 1);
1629
245k
                code = pdfi_setfillcolor(ctx);
1630
245k
                break;
1631
22.6k
            case TOKEN_SCN:   /* set special colour for stroke */
1632
22.6k
                pdfi_pop(ctx, 1);
1633
22.6k
                code = pdfi_setcolorN(ctx, stream_dict, page_dict, false);
1634
22.6k
                break;
1635
146k
            case TOKEN_scn:   /* set special colour for non-stroke */
1636
146k
                pdfi_pop(ctx, 1);
1637
146k
                code = pdfi_setcolorN(ctx, stream_dict, page_dict, true);
1638
146k
                break;
1639
302k
            case TOKEN_sh:       /* fill with sahding pattern */
1640
302k
                pdfi_pop(ctx, 1);
1641
302k
                code = pdfi_shading(ctx, stream_dict, page_dict);
1642
302k
                break;
1643
138k
            case TOKEN_Tstar:       /* Move to start of next text line */
1644
138k
                pdfi_pop(ctx, 1);
1645
138k
                code = pdfi_T_star(ctx);
1646
138k
                break;
1647
782k
            case TOKEN_Tc:       /* set character spacing */
1648
782k
                pdfi_pop(ctx, 1);
1649
782k
                code = pdfi_Tc(ctx);
1650
782k
                break;
1651
2.24M
            case TOKEN_Td:       /* move text position */
1652
2.24M
                pdfi_pop(ctx, 1);
1653
2.24M
                code = pdfi_Td(ctx);
1654
2.24M
                break;
1655
385k
            case TOKEN_TD:       /* Move text position, set leading */
1656
385k
                pdfi_pop(ctx, 1);
1657
385k
                code = pdfi_TD(ctx);
1658
385k
                break;
1659
2.02M
            case TOKEN_Tf:       /* set font and size */
1660
2.02M
                pdfi_pop(ctx, 1);
1661
2.02M
                code = pdfi_Tf(ctx, stream_dict, page_dict);
1662
2.02M
                break;
1663
2.41M
            case TOKEN_Tj:       /* show text */
1664
2.41M
                pdfi_pop(ctx, 1);
1665
2.41M
                code = pdfi_Tj(ctx);
1666
2.41M
                break;
1667
2.74M
            case TOKEN_TJ:       /* show text with individual glyph positioning */
1668
2.74M
                pdfi_pop(ctx, 1);
1669
2.74M
                code = pdfi_TJ(ctx);
1670
2.74M
                break;
1671
23.2k
            case TOKEN_TL:       /* set text leading */
1672
23.2k
                pdfi_pop(ctx, 1);
1673
23.2k
                code = pdfi_TL(ctx);
1674
23.2k
                break;
1675
2.41M
            case TOKEN_Tm:       /* set text matrix */
1676
2.41M
                pdfi_pop(ctx, 1);
1677
2.41M
                code = pdfi_Tm(ctx);
1678
2.41M
                break;
1679
759k
            case TOKEN_Tr:       /* set text rendering mode */
1680
759k
                pdfi_pop(ctx, 1);
1681
759k
                code = pdfi_Tr(ctx);
1682
759k
                break;
1683
4.70k
            case TOKEN_Ts:       /* set text rise */
1684
4.70k
                pdfi_pop(ctx, 1);
1685
4.70k
                code = pdfi_Ts(ctx);
1686
4.70k
                break;
1687
145k
            case TOKEN_Tw:       /* set word spacing */
1688
145k
                pdfi_pop(ctx, 1);
1689
145k
                code = pdfi_Tw(ctx);
1690
145k
                break;
1691
212k
            case TOKEN_Tz:       /* set text matrix */
1692
212k
                pdfi_pop(ctx, 1);
1693
212k
                code = pdfi_Tz(ctx);
1694
212k
                break;
1695
85.8k
            case TOKEN_v:           /* append curve (initial point replicated) */
1696
85.8k
                pdfi_pop(ctx, 1);
1697
85.8k
                code = pdfi_v_curveto(ctx);
1698
85.8k
                break;
1699
2.72M
            case TOKEN_w:           /* setlinewidth */
1700
2.72M
                pdfi_pop(ctx, 1);
1701
2.72M
                code = pdfi_setlinewidth(ctx);
1702
2.72M
                break;
1703
875k
            case TOKEN_W:           /* clip */
1704
875k
                pdfi_pop(ctx, 1);
1705
875k
                ctx->clip_active = true;
1706
875k
                ctx->do_eoclip = false;
1707
875k
                break;
1708
61.3k
            case TOKEN_Wstar:       /* eoclip */
1709
61.3k
                pdfi_pop(ctx, 1);
1710
61.3k
                ctx->clip_active = true;
1711
61.3k
                ctx->do_eoclip = true;
1712
61.3k
                break;
1713
106k
            case TOKEN_y:           /* append curve (final point replicated) */
1714
106k
                pdfi_pop(ctx, 1);
1715
106k
                code = pdfi_y_curveto(ctx);
1716
106k
                break;
1717
19.5k
            case TOKEN_APOSTROPHE:          /* move to next line and show text */
1718
19.5k
                pdfi_pop(ctx, 1);
1719
19.5k
                code = pdfi_singlequote(ctx);
1720
19.5k
                break;
1721
7.69k
            case TOKEN_QUOTE:           /* set word and character spacing, move to next line, show text */
1722
7.69k
                pdfi_pop(ctx, 1);
1723
7.69k
                code = pdfi_doublequote(ctx);
1724
7.69k
                break;
1725
4.56k
            default:
1726
                /* Shouldn't we return an error here? Original code didn't seem to. */
1727
4.56k
                break;
1728
85.0M
        }
1729
        /* We use a return value of 1 to indicate a repaired keyword (a pair of operators
1730
         * was concatenated, and we split them up). We must not return a value > 0 from here
1731
         * to avoid tripping that test.
1732
         */
1733
85.0M
        if (code > 0)
1734
0
            code = 0;
1735
85.0M
        return code;
1736
85.0M
    } else {
1737
        /* This means we either have a corrupted or illegal operator. The most
1738
         * usual corruption is two concatented operators (eg QBT instead of Q BT)
1739
         * I plan to tackle this by trying to see if I can make two or more operators
1740
         * out of the mangled one.
1741
         */
1742
8.91M
        code = split_bogus_operator(ctx, source, stream_dict, page_dict);
1743
8.91M
        if (code < 0)
1744
305k
            return code;
1745
8.60M
        if (pdfi_count_stack(ctx) > 0) {
1746
14
            keyword = ctx->stack_top[-1];
1747
14
            if (keyword != PDF_TOKEN_AS_OBJ(TOKEN_NOT_A_KEYWORD))
1748
14
                return REPAIRED_KEYWORD;
1749
14
        }
1750
8.60M
    }
1751
8.60M
    return 0;
1752
93.9M
}
1753
1754
void local_save_stream_state(pdf_context *ctx, stream_save *local_save)
1755
668k
{
1756
    /* copy the 'save_stream' data from the context to a local structure */
1757
668k
    local_save->stream_offset = ctx->current_stream_save.stream_offset;
1758
668k
    local_save->gsave_level = ctx->current_stream_save.gsave_level;
1759
668k
    local_save->stack_count = ctx->current_stream_save.stack_count;
1760
668k
    local_save->group_depth = ctx->current_stream_save.group_depth;
1761
668k
}
1762
1763
void cleanup_context_interpretation(pdf_context *ctx, stream_save *local_save)
1764
668k
{
1765
668k
    pdfi_seek(ctx, ctx->main_stream, ctx->current_stream_save.stream_offset, SEEK_SET);
1766
    /* The transparency group implenetation does a gsave, so the end group does a
1767
     * grestore. Therefore we need to do this before we check the saved gstate depth
1768
     */
1769
668k
    if (ctx->current_stream_save.group_depth != local_save->group_depth) {
1770
10
        pdfi_set_warning(ctx, 0, NULL, W_PDF_GROUPERROR, "pdfi_cleanup_context_interpretation", NULL);
1771
20
        while (ctx->current_stream_save.group_depth > local_save->group_depth)
1772
10
            pdfi_trans_end_group(ctx);
1773
10
    }
1774
668k
    if (ctx->pgs->level > ctx->current_stream_save.gsave_level)
1775
23.8k
        pdfi_set_warning(ctx, 0, NULL, W_PDF_TOOMANYq, "pdfi_cleanup_context_interpretation", NULL);
1776
668k
    if (pdfi_count_stack(ctx) > ctx->current_stream_save.stack_count)
1777
7.39k
        pdfi_set_warning(ctx, 0, NULL, W_PDF_STACKGARBAGE, "pdfi_cleanup_context_interpretation", NULL);
1778
957k
    while (ctx->pgs->level > ctx->current_stream_save.gsave_level)
1779
288k
        pdfi_grestore(ctx);
1780
668k
    pdfi_clearstack(ctx);
1781
668k
}
1782
1783
void local_restore_stream_state(pdf_context *ctx, stream_save *local_save)
1784
668k
{
1785
    /* Put the entries stored in the context back to what they were on entry
1786
     * We shouldn't really need to do this, the cleanup above should mean all the
1787
     * entries are properly reset.
1788
     */
1789
668k
    ctx->current_stream_save.stream_offset = local_save->stream_offset;
1790
668k
    ctx->current_stream_save.gsave_level = local_save->gsave_level;
1791
668k
    ctx->current_stream_save.stack_count = local_save->stack_count;
1792
668k
    ctx->current_stream_save.group_depth = local_save->group_depth;
1793
668k
}
1794
1795
void initialise_stream_save(pdf_context *ctx)
1796
668k
{
1797
    /* Set up the values in the context to the current values */
1798
668k
    ctx->current_stream_save.stream_offset = pdfi_tell(ctx->main_stream);
1799
668k
    ctx->current_stream_save.gsave_level = ctx->pgs->level;
1800
668k
    ctx->current_stream_save.stack_count = pdfi_count_total_stack(ctx);
1801
668k
}
1802
1803
/* Run a stream in a sub-context (saves/restores DefaultQState) */
1804
int pdfi_run_context(pdf_context *ctx, pdf_stream *stream_obj,
1805
                     pdf_dict *page_dict, bool stoponerror, const char *desc)
1806
283k
{
1807
283k
    int code = 0, code1 = 0;
1808
283k
    gs_gstate *DefaultQState = NULL;
1809
    /* Save any existing Default* colour spaces */
1810
283k
    gs_color_space *PageDefaultGray = ctx->page.DefaultGray_cs;
1811
283k
    gs_color_space *PageDefaultRGB = ctx->page.DefaultRGB_cs;
1812
283k
    gs_color_space *PageDefaultCMYK = ctx->page.DefaultCMYK_cs;
1813
1814
283k
    ctx->page.DefaultGray_cs = NULL;
1815
283k
    ctx->page.DefaultRGB_cs = NULL;
1816
283k
    ctx->page.DefaultCMYK_cs = NULL;
1817
1818
#if DEBUG_CONTEXT
1819
    dbgmprintf(ctx->memory, "pdfi_run_context BEGIN\n");
1820
#endif
1821
    /* If the stream has any Default* colour spaces, replace the page level ones.
1822
     * This will derement the reference counts to the current spaces if they are replaced.
1823
     */
1824
283k
    code = pdfi_setup_DefaultSpaces(ctx, stream_obj->stream_dict);
1825
283k
    if (code < 0)
1826
0
        goto exit;
1827
1828
    /* If no Default* space found, try using the Page level ones (if any) */
1829
283k
    if (ctx->page.DefaultGray_cs == NULL) {
1830
283k
        ctx->page.DefaultGray_cs = PageDefaultGray;
1831
283k
        rc_increment(PageDefaultGray);
1832
283k
    }
1833
283k
    if (ctx->page.DefaultRGB_cs == NULL) {
1834
283k
        ctx->page.DefaultRGB_cs = PageDefaultRGB;
1835
283k
        rc_increment(PageDefaultRGB);
1836
283k
    }
1837
283k
    if (ctx->page.DefaultCMYK_cs == NULL) {
1838
283k
        ctx->page.DefaultCMYK_cs = PageDefaultCMYK;
1839
283k
        rc_increment(PageDefaultCMYK);
1840
283k
    }
1841
1842
283k
    code = pdfi_copy_DefaultQState(ctx, &DefaultQState);
1843
283k
    if (code < 0)
1844
0
        goto exit;
1845
1846
283k
    code = pdfi_set_DefaultQState(ctx, ctx->pgs);
1847
283k
    if (code < 0)
1848
0
        goto exit;
1849
1850
283k
    code = pdfi_interpret_inner_content_stream(ctx, stream_obj, page_dict, stoponerror, desc);
1851
1852
283k
    code1 = pdfi_restore_DefaultQState(ctx, &DefaultQState);
1853
283k
    if (code >= 0)
1854
283k
        code = code1;
1855
1856
283k
exit:
1857
283k
    if (DefaultQState != NULL) {
1858
0
        gs_gstate_free(DefaultQState);
1859
0
        DefaultQState = NULL;
1860
0
    }
1861
1862
    /* Count down any Default* colour spaces */
1863
283k
    rc_decrement(ctx->page.DefaultGray_cs, "pdfi_run_context");
1864
283k
    rc_decrement(ctx->page.DefaultRGB_cs, "pdfi_run_context");
1865
283k
    rc_decrement(ctx->page.DefaultCMYK_cs, "pdfi_run_context");
1866
1867
    /* And restore the page level ones (if any) */
1868
283k
    ctx->page.DefaultGray_cs = PageDefaultGray;
1869
283k
    ctx->page.DefaultRGB_cs = PageDefaultRGB;
1870
283k
    ctx->page.DefaultCMYK_cs = PageDefaultCMYK;
1871
1872
#if DEBUG_CONTEXT
1873
    dbgmprintf(ctx->memory, "pdfi_run_context END\n");
1874
#endif
1875
283k
    return code;
1876
283k
}
1877
1878
1879
/* Interpret a sub-content stream, with some handling of error recovery, clearing stack, etc.
1880
 * This temporarily turns on pdfstoponerror if requested.
1881
 * It will make sure the stack is cleared and the gstate is matched.
1882
 */
1883
static int
1884
pdfi_interpret_inner_content(pdf_context *ctx, pdf_c_stream *content_stream, pdf_stream *stream_obj,
1885
                             pdf_dict *page_dict, bool stoponerror, const char *desc)
1886
353k
{
1887
353k
    int code = 0;
1888
353k
    bool saved_stoponerror = ctx->args.pdfstoponerror;
1889
353k
    stream_save local_entry_save;
1890
1891
353k
    local_save_stream_state(ctx, &local_entry_save);
1892
353k
    initialise_stream_save(ctx);
1893
1894
    /* This causes several files to render 'incorrectly', even though they are in some sense
1895
     * invalid. It doesn't seem to provide any benefits so I have, for now, removed it. If
1896
     * there is a good reason for it we can put it back again.
1897
     * FIXME - either restore or remove these lines
1898
     * /tests_private/pdf/PDF_2.0_FTS/fts_23_2310.pdf
1899
     * /tests_private/pdf/PDF_2.0_FTS/fts_23_2311.pdf
1900
     * /tests_private/pdf/PDF_2.0_FTS/fts_23_2312.pdf
1901
     * /tests_private/pdf/sumatra/recursive_colorspace.pdf
1902
     * /tests_private/pdf/uploads/Bug696410.pdf
1903
     * /tests_private/pdf/sumatra/1900_-_cairo_transparency_inefficiency.pdf (with pdfwrite)
1904
     */
1905
#if 0
1906
    /* Stop on error in substream, and also be prepared to clean up the stack */
1907
    if (stoponerror)
1908
        ctx->args.pdfstoponerror = true;
1909
#endif
1910
1911
#if DEBUG_CONTEXT
1912
    dbgmprintf1(ctx->memory, "BEGIN %s stream\n", desc);
1913
#endif
1914
353k
    code = pdfi_interpret_content_stream(ctx, content_stream, stream_obj, page_dict);
1915
#if DEBUG_CONTEXT
1916
    dbgmprintf1(ctx->memory, "END %s stream\n", desc);
1917
#endif
1918
1919
353k
    if (code < 0)
1920
353k
        dbgmprintf1(ctx->memory, "ERROR: inner_stream: code %d when rendering stream\n", code);
1921
1922
353k
    ctx->args.pdfstoponerror = saved_stoponerror;
1923
1924
    /* Put our state back the way it was on entry */
1925
#if PROBE_STREAMS
1926
    if (ctx->pgs->level > ctx->current_stream_save.gsave_level ||
1927
        pdfi_count_stack(ctx) > ctx->current_stream_save.stack_count)
1928
        code = ((pdf_context *)0)->first_page;
1929
#endif
1930
1931
353k
    cleanup_context_interpretation(ctx, &local_entry_save);
1932
353k
    local_restore_stream_state(ctx, &local_entry_save);
1933
353k
    if (code < 0)
1934
7.40k
        code = pdfi_set_error_stop(ctx, code, NULL, 0, "pdfi_interpret_inner_content", NULL);
1935
353k
    return code;
1936
353k
}
1937
1938
/* Interpret inner content from a buffer
1939
 */
1940
int
1941
pdfi_interpret_inner_content_buffer(pdf_context *ctx, byte *content_data,
1942
                                      uint32_t content_length,
1943
                                      pdf_dict *stream_dict, pdf_dict *page_dict,
1944
                                      bool stoponerror, const char *desc)
1945
69.7k
{
1946
69.7k
    int code = 0;
1947
69.7k
    pdf_c_stream *stream = NULL;
1948
69.7k
    pdf_stream *stream_obj = NULL;
1949
1950
69.7k
    if (content_length == 0)
1951
0
        return 0;
1952
1953
69.7k
    code = pdfi_open_memory_stream_from_memory(ctx, content_length,
1954
69.7k
                                               content_data, &stream, true);
1955
69.7k
    if (code < 0)
1956
0
        goto exit;
1957
1958
69.7k
    code = pdfi_obj_dict_to_stream(ctx, stream_dict, &stream_obj, false);
1959
69.7k
    if (code < 0)
1960
0
        return code;
1961
1962
    /* NOTE: stream gets closed in here */
1963
69.7k
    code = pdfi_interpret_inner_content(ctx, stream, stream_obj, page_dict, stoponerror, desc);
1964
69.7k
    pdfi_countdown(stream_obj);
1965
69.7k
 exit:
1966
69.7k
    return code;
1967
69.7k
}
1968
1969
/* Interpret inner content from a C string
1970
 */
1971
int
1972
pdfi_interpret_inner_content_c_string(pdf_context *ctx, char *content_string,
1973
                                      pdf_dict *stream_dict, pdf_dict *page_dict,
1974
                                      bool stoponerror, const char *desc)
1975
23.3k
{
1976
23.3k
    uint32_t length = (uint32_t)strlen(content_string);
1977
23.3k
    bool decrypt_strings;
1978
23.3k
    int code;
1979
1980
23.3k
    if (length == 0)
1981
0
        return 0;
1982
1983
    /* Underlying buffer limit is uint32, so handle the extremely unlikely case that
1984
     * our string is too big.
1985
     */
1986
23.3k
    if (length != strlen(content_string))
1987
0
        return_error(gs_error_limitcheck);
1988
1989
    /* Since this is a constructed string content, not part of the file, it can never
1990
     * be encrypted. So disable decryption during this call.
1991
     */
1992
23.3k
    decrypt_strings = ctx->encryption.decrypt_strings;
1993
23.3k
    ctx->encryption.decrypt_strings = false;
1994
23.3k
    code = pdfi_interpret_inner_content_buffer(ctx, (byte *)content_string, length,
1995
23.3k
                                               stream_dict, page_dict, stoponerror, desc);
1996
23.3k
    ctx->encryption.decrypt_strings = decrypt_strings;
1997
1998
23.3k
    return code;
1999
23.3k
}
2000
2001
/* Interpret inner content from a string
2002
 */
2003
int
2004
pdfi_interpret_inner_content_string(pdf_context *ctx, pdf_string *content_string,
2005
                                    pdf_dict *stream_dict, pdf_dict *page_dict,
2006
                                    bool stoponerror, const char *desc)
2007
46.4k
{
2008
46.4k
    return pdfi_interpret_inner_content_buffer(ctx, content_string->data, content_string->length,
2009
46.4k
                                               stream_dict, page_dict, stoponerror, desc);
2010
46.4k
}
2011
2012
/* Interpret inner content from a stream_dict
2013
 */
2014
int
2015
pdfi_interpret_inner_content_stream(pdf_context *ctx, pdf_stream *stream_obj,
2016
                                    pdf_dict *page_dict, bool stoponerror, const char *desc)
2017
283k
{
2018
283k
    return pdfi_interpret_inner_content(ctx, NULL, stream_obj, page_dict, stoponerror, desc);
2019
283k
}
2020
2021
/*
2022
 * Interpret a content stream.
2023
 * content_stream -- content to parse.  If NULL, get it from the stream_dict
2024
 * stream_dict -- dict containing the stream
2025
 */
2026
int
2027
pdfi_interpret_content_stream(pdf_context *ctx, pdf_c_stream *content_stream,
2028
                              pdf_stream *stream_obj, pdf_dict *page_dict)
2029
519k
{
2030
519k
    int code;
2031
519k
    pdf_c_stream *stream = NULL, *SubFile_stream = NULL;
2032
519k
    pdf_keyword *keyword;
2033
519k
    pdf_stream *s = ctx->current_stream;
2034
519k
    pdf_obj_type type;
2035
519k
    char EODString[] = "endstream";
2036
2037
    /* Check this stream, and all the streams currently being executed, to see
2038
     * if the stream we've been given is already in train. If it is, then we
2039
     * have encountered recursion. This can happen if a non-page stream such
2040
     * as a Form or Pattern uses a Resource, but does not declare it in it's
2041
     * Resources, and instead inherits it from the parent. We cannot detect that
2042
     * before the Resource is used, so all we can do is check here.
2043
     */
2044
738k
    while (s != NULL && pdfi_type_of(s) == PDF_STREAM) {
2045
219k
        if (s->object_num > 0) {
2046
218k
            if (s->object_num == stream_obj->object_num) {
2047
286
                pdf_dict *d = NULL;
2048
286
                bool known = false;
2049
2050
286
                code = pdfi_dict_from_obj(ctx, (pdf_obj *)stream_obj, &d);
2051
286
                if (code >= 0) {
2052
286
                    code = pdfi_dict_known(ctx, d, "Parent", &known);
2053
286
                    if (code >= 0 && known)
2054
16
                        (void)pdfi_dict_delete(ctx, d, "Parent");
2055
286
                }
2056
286
                pdfi_set_error(ctx, 0, NULL, E_PDF_CIRCULARREF, "pdfi_interpret_content_stream", "Aborting stream");
2057
286
                return_error(gs_error_circular_reference);
2058
286
            }
2059
218k
        }
2060
219k
        s = (pdf_stream *)s->parent_obj;
2061
219k
    }
2062
2063
519k
    if (content_stream != NULL) {
2064
115k
        stream = content_stream;
2065
403k
    } else {
2066
403k
        code = pdfi_seek(ctx, ctx->main_stream, pdfi_stream_offset(ctx, stream_obj), SEEK_SET);
2067
403k
        if (code < 0)
2068
0
            return code;
2069
2070
403k
        if (stream_obj->length_valid) {
2071
395k
            if (stream_obj->Length == 0)
2072
1.83k
                return 0;
2073
393k
            code = pdfi_apply_SubFileDecode_filter(ctx, stream_obj->Length, NULL, ctx->main_stream, &SubFile_stream, false);
2074
393k
        }
2075
8.36k
        else
2076
8.36k
            code = pdfi_apply_SubFileDecode_filter(ctx, 0, EODString, ctx->main_stream, &SubFile_stream, false);
2077
402k
        if (code < 0)
2078
0
            return code;
2079
2080
402k
        code = pdfi_filter(ctx, stream_obj, SubFile_stream, &stream, false);
2081
402k
        if (code < 0) {
2082
540
            pdfi_close_file(ctx, SubFile_stream);
2083
540
            return code;
2084
540
        }
2085
402k
    }
2086
2087
516k
    pdfi_set_stream_parent(ctx, stream_obj, ctx->current_stream);
2088
516k
    ctx->current_stream = stream_obj;
2089
2090
320M
    do {
2091
320M
        code = pdfi_read_token(ctx, stream, stream_obj->object_num, stream_obj->generation_num);
2092
320M
        if (code < 0) {
2093
770k
            if (code == gs_error_ioerror || code == gs_error_VMerror || ctx->args.pdfstoponerror) {
2094
16.7k
                if (code == gs_error_ioerror) {
2095
16.7k
                    pdfi_set_error(ctx, code, NULL, E_PDF_BADSTREAM, "pdfi_interpret_content_stream", (char *)"**** Error reading a content stream.  The page may be incomplete");
2096
16.7k
                } else if (code == gs_error_VMerror) {
2097
0
                    pdfi_set_error(ctx, code, NULL, E_PDF_OUTOFMEMORY, "pdfi_interpret_content_stream", (char *)"**** Error ran out of memory reading a content stream.  The page may be incomplete");
2098
0
                }
2099
16.7k
                goto exit;
2100
16.7k
            }
2101
753k
            continue;
2102
770k
        }
2103
2104
320M
        if (pdfi_count_stack(ctx) <= 0) {
2105
275k
            if(stream->eof == true)
2106
248k
                break;
2107
275k
        }
2108
2109
319M
repaired_keyword:
2110
319M
        type = pdfi_type_of(ctx->stack_top[-1]);
2111
319M
        if (type == PDF_FAST_KEYWORD) {
2112
84.6M
            keyword = (pdf_keyword *)ctx->stack_top[-1];
2113
2114
84.6M
            switch((uintptr_t)keyword) {
2115
45.5k
                case TOKEN_ENDSTREAM:
2116
45.5k
                    pdfi_pop(ctx,1);
2117
45.5k
                    goto exit;
2118
0
                    break;
2119
212
                case TOKEN_ENDOBJ:
2120
212
                    pdfi_clearstack(ctx);
2121
212
                    code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_MISSINGENDSTREAM, "pdfi_interpret_content_stream", NULL);
2122
212
                    goto exit;
2123
0
                    break;
2124
0
                case TOKEN_INVALID_KEY:
2125
0
                    pdfi_clearstack(ctx);
2126
0
                    if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_limitcheck), NULL, E_PDF_KEYWORDTOOLONG, "pdfi_interpret_content_stream", NULL)) < 0)
2127
0
                        goto exit;
2128
0
                    break;
2129
0
                case TOKEN_TOO_LONG:
2130
0
                    pdfi_clearstack(ctx);
2131
0
                    if ((code = pdfi_set_error_stop(ctx, gs_note_error(gs_error_syntaxerror), NULL, E_PDF_MISSINGENDSTREAM, "pdfi_interpret_content_stream", NULL)) < 0)
2132
0
                        goto exit;
2133
0
                    break;
2134
84.5M
                default:
2135
84.5M
                    goto execute;
2136
84.6M
            }
2137
84.6M
        }
2138
235M
        else if (type == PDF_KEYWORD)
2139
8.91M
        {
2140
93.4M
execute:
2141
93.4M
            {
2142
93.4M
                pdf_dict *stream_dict = NULL;
2143
2144
93.4M
                code = pdfi_dict_from_obj(ctx, (pdf_obj *)stream_obj, &stream_dict);
2145
93.4M
                if (code < 0)
2146
0
                    goto exit;
2147
2148
93.4M
                code = pdfi_interpret_stream_operator(ctx, stream, stream_dict, page_dict);
2149
93.4M
                if (code == REPAIRED_KEYWORD)
2150
14
                    goto repaired_keyword;
2151
2152
93.4M
                if (code < 0) {
2153
4.60M
                    if ((code = pdfi_set_error_stop(ctx, code, NULL, E_PDF_TOKENERROR, "pdf_interpret_content_stream", NULL)) < 0) {
2154
871
                        pdfi_clearstack(ctx);
2155
871
                        goto exit;
2156
871
                    }
2157
4.60M
                }
2158
93.4M
            }
2159
93.4M
        }
2160
319M
        if(stream->eof == true)
2161
204k
            break;
2162
320M
    }while(1);
2163
2164
516k
exit:
2165
516k
    ctx->current_stream = pdfi_stream_parent(ctx, stream_obj);
2166
516k
    pdfi_clear_stream_parent(ctx, stream_obj);
2167
516k
    pdfi_close_file(ctx, stream);
2168
516k
    if (SubFile_stream != NULL)
2169
401k
        pdfi_close_file(ctx, SubFile_stream);
2170
516k
    return code;
2171
516k
}