OpenSystemsDevelopment / qpdf

Fix QPDFFormFieldObjectHelper::getChoices (fixes #1433)

Add additional sanity check during xref recovery

Return the display value if the choices entry is an array of strings rather
than a single string.

Test file is need-appearances.pdf modified to contain one array entry.

Do not copy duplicate pages during xref recovery.

Thanks to github user @cdosborn for the basic enhancement.

Only top-level XMP metadata is supposed to be left unencrypted. All
other metadata is not treated specially.

Replace JetBrains-specific cmake profiles with CMakePresets.json

Plus sneak in some spell checks

... to remove the /Root /StructTreeRoot and /MarkInfo entries.

... containing objects with no white-space between them.

To enforce the rule that objects end at the start-offset of the next
object, each object is parsed in it own object stream.

To facilitate this, a new private API input source is::OffsetBuffer has
been added which only contains the object but reports offsets relative to
the start of the object stream. This is adapted from OffsetInputSource by
changing the direction of the offset, endowing it with its own
BufferInputSource and striooing out checks duplicated in BufferInputSource.

Fixes the expected failure in the test case added in #1266.

Only build strings when needed.

This was due to the use of last_object_description, which is not set for
the object stream itself.

Also, modify the messages introduced #1391 and #1392 to report the supposed
offset of the objects.

Move methods responsible for loading or keeping track of objects to
QPDF_objects.cc.

The split was part of the reverted #1297. Reintroducing it now makes it
easier/safer to keep the work to refactor the xref and object tables in
sync with main.

Refactor xref table reconstruction (Fixes #1362)

Split reconstruction into three passes - scanning of input for objects and
trailer, insertion of objects into the xref table, and loading the trailer.

This allows insertion to take place in the usual reverse order and removes
the need for a separate insertReconstructedXrefEntry method.

It also allows trailer to be tried from most recent to oldest.

Ignore any found trailers without /Root entry.

Figuring out which classes are part of the public API by using library
symbols is fragile (dependent on specific compiler optimizations) and
unreliable (misses some inline things). Instead, use castxml, a tool
that parses C++ to an abstract syntax tree and generates XML, to get a
reliable accounting of public classes and their sizes.

Enhance error checking of object stream object ids and offsets

The original test file contains multiple entries with id 0 and offset 0.
One entry has been modified such that the id is valid (6).

Object streams with invalid offsets are a source of unreproduceable
oss-fuzz time-outs.

and delay to qpdf 13 to give users notice of the change.

Push mode is not used by qpdf and is not tested. It is difficult to see a
legitimate use for it.

Continuing to support it creates unnecessary constraints and effort when
adapting the tokenizer.