mirror of
https://github.com/storytold/pdfcraft.git
synced 2026-11-12 09:21:17 +00:00
Dylan M. Taylor
f1055f6938
The signed revision's DocMDP permission was looked up by walking the old revision's signature fields, but the walk stops at a depth and a qualified-name budget. When it stopped before the signature that ends the revision, infos certify was left as the value read from the current document, so a later /P rewrite could speak for the signed revision. The walk now reports that it was cut, and the lookup then claims no permission instead. Standalone-timestamp exclusion takes its values from a separate walk that builds no names, so the name budget cannot hide one.