mirror of
https://github.com/storytold/deckcraft.git
synced 2026-10-27 20:16:50 -06:00
Only each member was capped (2 GiB), so a compact archive with many media items, or one large member listed under many items, could inflate without limit and exhaust memory while opening. Loading now caps all embedded media together (4 GiB) and the number of media items (100,000), refuses a member before inflating it when it declares more than is left, and keeps one item per media id, so a repeated id inflates its member once and the deck can still be saved (a zip can't hold two media/<id> entries). Co-authored-by: Cursor <cursoragent@cursor.com>