An ellipse at the EMU limit, compounding group scales or custom-geometry
guides could reach vello's flattener with an outline billions of pixels
long; it sizes its buffer by that length and the allocation aborts the
process. geometry::drawable() rejects a shape with a non-finite path
point, then measures the outline's control box (which always holds the
curve, unlike the tight bounding box when its extremum overflows) unioned
with the frame; past 1e7 device pixels the shape is skipped with a warning.
Rebased onto the render module split: the guard now lives in geometry.rs
and renderer.rs.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Brandon Thomas