From 3d0d141710d23b0f08c865100b4d55b4c2976486 Mon Sep 17 00:00:00 2001
From: "Philip P. Moltmann"
Date: Wed, 27 Apr 2016 14:54:27 -0700
Subject: [PATCH] Add a security warning to PdfRenderer doc.
Change-Id: Ia714d312665179366adae8e1923e4b9c339ebb59
---
graphics/java/android/graphics/pdf/PdfRenderer.java | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/graphics/java/android/graphics/pdf/PdfRenderer.java b/graphics/java/android/graphics/pdf/PdfRenderer.java
index feb805260cb74..520ebe5f2db88 100644
--- a/graphics/java/android/graphics/pdf/PdfRenderer.java
+++ b/graphics/java/android/graphics/pdf/PdfRenderer.java
@@ -129,6 +129,10 @@ public final class PdfRenderer implements AutoCloseable {
* Note: This class takes ownership of the passed in file descriptor
* and is responsible for closing it when the renderer is closed.
*
+ *
+ * If the file is from an untrusted source it is recommended to run the renderer in a separate,
+ * isolated process with minimal permissions to limit the impact of security exploits.
+ *
*
* @param input Seekable file descriptor to read from.
*