Skip to content
Primary QPDF source code and documentation
C++ Shell Perl C M4 Makefile Other
Branch: master
Clone or download
Type Name Latest commit message Commit time
Failed to load latest commit information.
appimage Update copyrights for 2019 Jan 7, 2019
azure-pipelines Update Windows image and compiler Aug 30, 2019
completions Add completion files for packagers Jan 8, 2019
doc update release date to actual date Apr 29, 2008
examples Pass offset and length to ParserCallbacks::handleObject Aug 23, 2019
fuzz Don't encrypt trailer, fixes fuzz issue 15983 Aug 29, 2019
include/qpdf Add methods QPDF::anyWarnings and QPDF::closeInputSource Aug 31, 2019
libqpdf Prepare 9.0.0 release Sep 1, 2019
libtests Add remove_file and rename_file to QUtil Aug 31, 2019
logo Generate PNG files Feb 25, 2018
m4 Try to use pkg-config to find external dependencies (fixes #324) Jun 22, 2019
make Override umask on install (fixes #326) Jun 22, 2019
manual Fix duplicated release notes entries Sep 1, 2019
qpdf Prepare 9.0.0 release Sep 1, 2019
qtest Improve how qtest finds windows /bin Aug 18, 2019
zlib-flate Remove stray TODO comment Aug 31, 2019
.gitignore Add fuzzers to exercise specific pipeline classes Jun 23, 2019
.travis.yml Update travis package installations Feb 25, 2018
Artistic-2.0 update release date to actual date Apr 29, 2008
ChangeLog Prepare 9.0.0 release Sep 1, 2019
INSTALL update release date to actual date Apr 29, 2008
LICENSE.txt Additionally license under Apache License version 2.0 Sep 14, 2017
Makefile oss-fuzz initial integration Jun 13, 2019 Fix sign and conversion warnings (major) Jun 21, 2019 Tweak spacing and wording Feb 25, 2018 Remove needless references/invocations Oct 13, 2018
README-maintainer Update release preparation instructions Aug 31, 2019 Update for AppImage Feb 25, 2018
README-windows-install.txt README cleanup Aug 22, 2017 Automatically detect outdated generated files Oct 11, 2018 Remove unused gcc-linux make rules Jun 22, 2019
TODO Update C++-11 notes Aug 30, 2019
aclocal.m4 Try to use pkg-config to find external dependencies (fixes #324) Jun 22, 2019 configure: determine wordsize automatically Jun 21, 2019
autofiles.sums Prepare 9.0.0 release Sep 1, 2019 Exclude emacs backups in Aug 30, 2019
azure-pipelines.yml Update Windows image and compiler Aug 30, 2019
config-mingw configure: determine wordsize automatically Jun 21, 2019
config-msvc configure: determine wordsize automatically Jun 21, 2019
config.guess Update autoconf and libtool files Jun 20, 2012
config.sub Update autoconf and libtool files Jun 20, 2012
configure Prepare 9.0.0 release Sep 1, 2019 Prepare 9.0.0 release Sep 1, 2019
copy_dlls Windows fix Jan 15, 2018
install-sh Update utility scripts from automake Feb 25, 2018
ispell-words spell check Aug 31, 2019 Correct handling of elf symbol versioning Jan 15, 2018 Add libjpeg dependency Aug 21, 2017 Rerun libtoolize Aug 11, 2017
make_dist Compare versions between CLI and library Apr 21, 2019
make_windows_releases Tweak release process Jun 23, 2018
make_windows_releases-finish Streamline Windows release process Feb 19, 2018
mkinstalldirs Update utility scripts from automake Feb 25, 2018



Azure Pipeline Build Status Travis Build Status

This is the QPDF package. Information about it can be found at The source code repository is hosted at github:

Verifying Distributions

The public key used to sign qpdf source distributions has fingerprint C2C9 6B10 011F E009 E6D1 DF82 8A75 D109 9801 2C7E and can be found at or downloaded from a public key server.

Copyright, License

QPDF is copyright (c) 2005-2019 Jay Berkenbilt

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

You may also see the license in the file LICENSE.txt in the source distribution.

Versions of qpdf prior to version 7 were released under the terms of version 2.0 of the Artistic License. At your option, you may continue to consider qpdf to be licensed under those terms. Please see the manual for additional information. The Artistic License appears in the file Artistic-2.0 in the source distribution.


QPDF depends on the external libraries zlib and jpeg. The libjpeg-turbo library is also known to work since it is compatible with the regular jpeg library, and QPDF doesn't use any interfaces that aren't present in the straight jpeg8 API. These are part of every Linux distribution and are readily available. Download information appears in the documentation. For Windows, you can download pre-built binary versions of these libraries for some compilers; see for additional details.

QPDF requires a C++ compiler that works with STL. Your compiler must also support long long. Almost all modern compilers do. If you are trying to port qpdf to a compiler that doesn't support long long, you could change all occurrences of long long to long in the source code, noting that this would break binary compatibility with other builds of qpdf. Doing so would certainly prevent qpdf from working with files larger than 2 GB, but remaining functionality would most likely work fine. If you built qpdf this way and it passed its test suite with large file support disabled, you could be confident that you had an otherwise working qpdf.

Licensing terms of embedded software

QPDF makes use of zlib and jpeg libraries for its functionality. These packages can be downloaded separately from their own download locations, or they can be downloaded in the external-libs area of the qpdf download site.

Please see the NOTICE file for information on licenses of embedded software.

Building from a pristine checkout

When building qpdf from a pristine checkout from version control, generated documentation files are not present. You may either generate them (by passing --enable-doc-maintenance to ./configure and satisfying the extra build-time dependencies) or obtain them from a released source package, which includes them. If you want to grab just the files that are in the source distribution but not in the repository, extract a source distribution in a temporary directory, and run make CLEAN=1 This will create a file called, which can you can extract in a checkout of the source repository. This step is optional unless you are running make install and want the html and PDF versions of the documentation to be installed.

Building from source distribution on UNIX/Linux

For UNIX and UNIX-like systems, you can usually get by with just

make install

Packagers may set DESTDIR, in which case make install will install inside of DESTDIR, as is customary with many packages. For more detailed general information, see the "INSTALL" file in this directory. If you are already accustomed to building and installing software that uses autoconf, there's nothing new for you in the INSTALL file. Note that qpdf uses autoconf but not automake. We have our own system of Makefiles that allows cross-directory dependencies, doesn't use recursive make, and works better on non-UNIX platforms.

Building on Windows

QPDF is known to build and pass its test suite with mingw (latest version tested: gcc 7.2.0), mingw64 (latest version tested: 7.2.0) and Microsoft Visual C++ 2015, both 32-bit and 64-bit versions. MSYS2 is required to build as well in order to get make and other related tools. See for details on how to build under Windows.

Additional Notes on Build

QPDF's build system, inspired by abuild, can optionally use its own built-in rules rather than using libtool and obeying the compiler specified with configure. This can be enabled by passing --with-buildrules=buildrules where buildrules corresponds to one of the .mk files (other than in the make directory. This should never be necessary on a UNIX system, but may be necessary on a Windows system. See for details.

The QPDF package provides some executables and a software library. A user manual can be found in the "doc" directory. The docbook sources to the user manual can be found in the manual directory.

The software library is just libqpdf, and all the header files are in the qpdf subdirectories of include and libqpdf. If you link statically with -lqpdf, then you will also need to link with -lz and -ljpeg. The shared qpdf library is linked with -lz and -ljpeg, none of qpdf's public header files directly include files from libz, and only Pl_DCT.hh includes files from libjpeg, so for most cases, qpdf's development files are self contained. If you need to use Pl_DCT in your application code, you will need to have the header files for some libjpeg distribution in your include path.

To learn about using the library, please read comments in the header files in include/qpdf, especially QPDF.hh, QPDFObjectHandle.hh, and QPDFWriter.hh. These are the best sources of documentation on the API. You can also study the code of qpdf/, which exercises most of the public interface. There are additional example programs in the examples directory. Reading all the source files in the qpdf directory (including the qpdf command-line tool and some test drivers) along with the code in the examples directory will give you a complete picture of every aspect of the public interface.

Additional Notes on Test Suite

By default, slow tests and tests that require dependencies beyond those needed to build qpdf are disabled. Slow tests include image comparison tests and large file tests. Image comparison tests can be enabled by passing --enable-test-compare-images to ./configure. This was on by default in qpdf versions prior to 3.0, but is now off by default. Large file tests can be enabled by passing --with-large-file-test-path=path to ./configure or by setting the QPDF_LARGE_FILE_TEST_PATH environment variable. On Windows, this should be a Windows path. Run ./configure --help for additional options. The test suite provides nearly full coverage even without these tests. Unless you are making deep changes to the library that would impact the contents of the generated PDF files or testing this on a new platform for the first time, there is no real reason to run these tests. If you're just running the test suite to make sure that qpdf works for your build, the default tests are adequate. The configure rules for these tests do nothing other than setting variables in, so you can feel free to turn these on and off directly in rather than rerunning configure.

If you are packaging qpdf for a distribution and preparing a build that is run by an autobuilder, you may want to add the --enable-show-failed-test-output to configure options. This way, if the test suite fails, test failure detail will be included in the build output. Otherwise, you will have to have access to the qtest.log file from the build to view test failures. The debian packages for qpdf enable this option.

Random Number Generation

By default, when qpdf detects either the Windows cryptography API or the existence of /dev/urandom, /dev/arandom, or /dev/random, it uses them to generate cryptography secure random numbers. If none of these conditions are true, the build will fail with an error. This behavior can be modified in several ways:

  • If you configure with --disable-os-secure-random or define SKIP_OS_SECURE_RANDOM, qpdf will not attempt to use Windows cryptography or the random device. You must either supply your own random data provider or allow use of insecure random numbers.
  • If you configure qpdf with the --enable-insecure-random option or define USE_INSECURE_RANDOM, qpdf will try insecure random numbers if OS-provided secure random numbers are disabled. This is not a fallback. In order for insecure random numbers to be used, you must also disable OS secure random numbers since, otherwise, failure to find OS secure random numbers is a compile error. The insecure random number source is stdlib's random() or rand() calls. These random numbers are not cryptography secure, but the qpdf library is fully functional using them. Using non-secure random numbers means that it's easier in some cases to guess encryption keys. If you're not generating encrypted files, there's no advantage to using secure random numbers.
  • In all cases, you may supply your own random data provider. To do this, derive a class from qpdf/RandomDataProvider (since version 5.1.0) and call QUtil::setRandomDataProvider before you create any QPDF objects. If you supply your own random data provider, it will always be used even if support for one of the other random data providers is compiled in. If you wish to avoid any possibility of your build of qpdf from using anything but a user-supplied random data provider, you can define SKIP_OS_SECURE_RANDOM and not USE_INSECURE_RANDOM. In this case, qpdf will throw a runtime error if any attempt is made to generate random numbers and no random data provider has been supplied.

If you are building qpdf on a platform that qpdf doesn't know how to generate secure random numbers on, a patch would be welcome.

You can’t perform that action at this time.