#157 - vulnerability in used pypdf

m32 · Dec 19, 2023 · 6a63b13 · 6a63b13
1 parent 196898c
commit 6a63b13
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 5 deletions.
diff --git a/endesive/__init__.py b/endesive/__init__.py
@@ -2,6 +2,6 @@
 
 __author__ = 'Grzegorz Makarewicz'
 __license__ = 'MIT'
-__version__ = '2.16'
+__version__ = '2.16.1'
 
 __all__ = [__author__, __license__, __version__]
diff --git a/endesive/pdf/PyPDF2/pdf.py b/endesive/pdf/PyPDF2/pdf.py
@@ -2000,7 +2000,7 @@ def _pairs(self, array):
     def readNextEndLine(self, stream):
         debug = False
         if debug: print(">>readNextEndLine")
-        line = b_("")
+        line_parts = []
         while True:
             # Prevent infinite loops in malformed PDFs
             if stream.tell() == 0:
@@ -2027,10 +2027,10 @@ def readNextEndLine(self, stream):
                 break
             else:
                 if debug: print("  x is neither")
-                line = x + line
-                if debug: print(("  RNEL line:", line))
+                line_parts.append(x)
         if debug: print("leaving RNEL")
-        return line
+        line_parts.reverse()
+        return b"".join(line_parts)
 
     def decrypt(self, password):
         """