#157 - vulnerability in used pypdf

Author: m32

endesive/__init__.py

@@ -2,6 +2,6 @@
 
 __author__ = 'Grzegorz Makarewicz'
 __license__ = 'MIT'
-__version__ = '2.16'
+__version__ = '2.16.1'
 
 __all__ = [__author__, __license__, __version__]

endesive/pdf/PyPDF2/pdf.py

@@ -2000,7 +2000,7 @@ def _pairs(self, array):
     def readNextEndLine(self, stream):
         debug = False
         if debug: print(">>readNextEndLine")
-        line = b_("")
+        line_parts = []
         while True:
             # Prevent infinite loops in malformed PDFs
             if stream.tell() == 0:
@@ -2027,10 +2027,10 @@ def readNextEndLine(self, stream):
                 break
             else:
                 if debug: print("  x is neither")
-                line = x + line
-                if debug: print(("  RNEL line:", line))
+                line_parts.append(x)
         if debug: print("leaving RNEL")
-        return line
+        line_parts.reverse()
+        return b"".join(line_parts)
 
     def decrypt(self, password):
         """