Simplest C++ Callback, from SumatraPDF

Re:Simplest C++ Callback, from SumatraPDF by dolmen on Monday June 16, 2025 @04:18AM (#44287583)

It is not sandboxed.

So one can expect zero day exists and are exploited.

That may not be a feature for you, but it is for attackers.

[ Parent | on HN ]

Re:Simplest C++ Callback, from SumatraPDF by shakna on Monday June 16, 2025 @07:18AM (#44288506)

Sumatra has more security features than most other readers?

For example, it doesn't support JavaScript. And it doesn't support GoToE.

The text features, both strings and fonts, get sent through HarfBuzz for sanitisation.

How is it not sandboxed?

[ Parent | on HN ]

Re:Simplest C++ Callback, from SumatraPDF by jasonjayr on Monday June 16, 2025 @06:28AM (#44288174)

Does it implement any of the dynamic features in PDF that are vectors for easy attacks like that?

PDF was originally a display-only format.

[ Parent | on HN ]

Re:Simplest C++ Callback, from SumatraPDF by kccqzy on Monday June 16, 2025 @11:10AM (#44290340)

You don't need any dynamic features in PDF to attack. One of the most famous exploits used a bug in the JBIG2 format to build the attacker's own dynamic feature (basically a virtual machine built from logic operations) to launch an exploit. https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i...

In fact you have gotten it backwards. The obviously dynamic features in PDF like JavaScript are designed to be dynamic so they receive so much more attention in security. So smart attackers attack the not-obviously-dynamic features in PDF.

[ Parent | on HN ]

Re:Simplest C++ Callback, from SumatraPDF by jasonjayr on Monday June 16, 2025 @12:03PM (#44290848)

Ah, very good point.

[ Parent | on HN ]