codice/acdebugger

AC Debugger should identify acceptable security failures and ignore those

paouelle opened this issue · 0 comments

Description

Security exceptions are not necessarily an issue all the time. Sometimes the code is designed to handle those by falling back to a different behavior for example. One such case is at org.apache.pdfbox.pdmodel.font.FileSystemFontProvider:214 where the code catches an access control exception and continues without loading fonts. This would be an acceptable situation where no permissions actually need to be granted.

Steps to Reproduce

  1. Ingest a PDF document in DDF

Expected behavior:

The debugger should simply ignore this security exception and continue as it it had failed normally. It could report it when extra information is requested (--dump).

Actual behavior:

The debugger analyzes this particular security failures as any other and reports possible solutions which are actually not required.

Reproduces how often:

100%

Version

1.0.2