Review

In line 393, StringTokenizer.nextToken() is invoked without prior check of whether there is a next token, e.g., via hasNextToken(). The enclosing method implements a lookup, which may be expected to throw if there is no matching element. However, this is not explicit.

• missing/condition/value_or_state

com/itextpdf/text/pdf/CJKFont.java

getBBox(int)

class CJKFont {
    private float getBBox(int idx) {
        String s = (String)fontDesc.get("FontBBox");
        StringTokenizer tk = new StringTokenizer(s, " []\r\n\t\f");
        String ret = tk.nextToken();
        for (int k = 0; k < idx; ++k)
            ret = tk.nextToken();
        return Integer.parseInt(ret);
    }

}