20 ms·
I see threads recommending software doing full-text indexing of pdfs descending into archives. I remember that a few years ago there were some security vulnerab
by hamilyon2 7y ago
I see threads recommending software doing full-text indexing of pdfs descending into archives. I remember that a few years ago there were some security vulnerabilities in exactly this kind of software on some fairly modern Linux distro.
So, if you enable it or use it, make sure computer is isolated of anything of value to you, not to mention it is your main work or personal machine.
- nullbyte 7y agoAre you alleging there is a security issue in this software? It's open source, feel free to show us where.
- tomsmeding 7y agoGP said "exactly this _kind_ of software" -- i.e. software with a similar type of functionality. He did not claim that the posted code specifically has a vulnerability.
- phiresky 7y agoWell, it uses the exact same pdf parsing library that e.g. Evince uses.. so if you ever open untrusted PDFs in a normal viewer, this will expose you to the same danger (maybe less since it only extracts text). But yeah, if there was a nice safe PDF library written in pure Rust I would of course link against that.