Bug 99309 – dev-perl/PDF-Create is (very) outdated, potential security problem with "(" in string printing

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Matthias Wenzel 2005-07-17 03:54:42 UTC]

The latest version from 2001 is 0.06.1b (!)
The homepage should point to http://sourceforge.net/projects/perl-pdf/
There are serious problems in the string passing routines in version 0.01 (which
is the current in gentoo and CPAN)


Reproducible: Always
Steps to Reproduce:
#!/usr/bin/perl -w
use strict;
use PDF::Create;

my $pdf = new PDF::Create('filename' => 'mypdf.pdf');
my $root = $pdf->new_page('MediaBox' => [ 0, 0, 612, 792 ]);
my $f1 = $pdf->font('Subtype'  => 'Type1',
        'Encoding' => 'WinAnsiEncoding',
        'BaseFont' => 'Helvetica');

$root->stringc($f1, 40, 306, 426, "PDF::Create (not so cool");

$pdf->close;

Actual Results:  
something between "acroread won't show the page" and "the pdf page shows a
memorydump of the perl process"

[Comment 1 Michael Cummings (RETIRED) 2005-07-18 03:40:41 UTC]

bumped, tested, posted.