Problem/Motivation

When upgrading dompdf to 2.0.0 (security release) the dompdf autoload.inc.php could not be found.

Steps to reproduce

With print 7.x-2.4 and dompdf 1.2.2 or greater attempt to save the print pdf configuration page, or attempt to generate a pdf file. An error occurs that the autoload.inc.php could not be found.

Proposed resolution

Modify print_pdf_dompdf.pages.inc to use /../../../../autoload.inc.php instead of /../autoload.inc.php when detected version is greater than 1.2.1.

CommentFileSizeAuthor
#3 print-3298955-3.patch911 bytespuddyglum

Issue fork print-3298955

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

puddyglum created an issue. See original summary.

puddyglum opened merge request !3

puddyglum’s picture

puddyglum
Primary language English
Location Elk Grove, CA
commented
Status: Active » Needs review
StatusFileSize
new print-3298955-3.patch911 bytes
solideogloria’s picture

solideogloria commented
Status: Needs review » Reviewed & tested by the community

I can confirm that the issue occurs. The patch fixes it, and the module works with the 2.0.0 library.

Important Note: After updating the library, since the path to Dompdf.php in the library changed, you have to visit the module's configuration form (/admin/config/user-interface/print/pdf) and select dompdf from the dropdown again.

solideogloria’s picture

solideogloria commented

Should a Feature Request issue be created for showing users a warning if they are using a vulnerable version of dompdf?

j_s’s picture

j_s commented

I can confirm this patch works with dompdf 2.0.1. Any plan to merge this patch in?

steffenr’s picture

steffenr
Primary language German
commented

Works fine for us and should be merged into latest DEV.. Thx.

yurg’s picture

yurg commented

The patch works for Dompdf 2.0.4 update as well.

jcnventura made their first commit to this issue’s fork.

  • jcnventura committed b6971887 on 7.x-2.x authored by puddyglum 
    Issue #3298955 by puddyglum, solideogloria, joshuasosa, SteffenR, yurg:...
jcnventura’s picture

jcnventura
Primary language English
commented
Status: Reviewed & tested by the community » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.