ZetenypappandClaude Opus 5.5 daae74b57e Open: cap absurd effect sizes from a file at what Format Shape allows ...

A .pptx or .deckcraft could give a glow, soft edge, shadow or reflection any size. A glow of
~10^16 pt made vello panic while flattening, one of 10^18 pt made rendering ask for 34 GB and abort.
sane_numbers (run by repair on every opened file) now caps them like line widths and font sizes:
glow 150, soft edges 100, shadows 200, reflections 100 pt; shadow scale and skew are kept sane and
non-numbers become 0, on shapes and on text runs, table cells included.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-18 10:07:58 +02:00

..

anim

Merge PR #520 from NikitkaRa: Insert: Summary, Section and Slide Zoom with Return to Zoom

2026-10-14 15:58:31 -04:00

av1

Merge PR #484 from NikitkaRa: Video: check the whole picture store against a memory budget (#398)

2026-10-14 14:12:46 -04:00

bitstream

Merge PR #484 from NikitkaRa: Video: check the whole picture store against a memory budget (#398)

2026-10-14 14:12:46 -04:00

color

…

engine

Open: cap absurd effect sizes from a file at what Format Shape allows

2026-10-18 10:07:58 +02:00

fonts

PDFW2: integrate current main with shared PDF writing

2026-10-14 21:00:04 -06:00

format

Open: cap absurd effect sizes from a file at what Format Shape allows

2026-10-18 10:07:58 +02:00

geom

Merge the format, canvas and dialog PRs integrated on land-r4 (#567 #569 #630 #637 #536 #559 #519 #506 #549 #556 #525)

2026-10-14 15:06:35 -04:00

h264

Fix up landed PRs from review

2026-10-14 14:31:01 -04:00

hevc

Merge PR #484 from NikitkaRa: Video: check the whole picture store against a memory budget (#398)

2026-10-14 14:12:46 -04:00

isobmff

Codecs: a hostile number is a format error, not an overflow

2026-10-13 20:16:51 +03:00

matroska

Merge PR #467 from NikitkaRa: Parsers: check hostile numeric fields before arithmetic (#426)

2026-10-14 13:08:43 -04:00

mcp

M13.1: validate remote MCP replies (#718)

2026-10-14 22:24:15 +02:00

media

Merge PR #749 from midasmatterhorn: media: walk ID3 tag chains iteratively so crafted files cannot overflow the stack

2026-10-14 21:59:38 -04:00

metafile

Merge PR #635 from NikitkaRa: Metafile: EMF+ Clear, and the EMF+ record coverage written down

2026-10-14 13:57:48 -04:00

model

Merge PR #773 from Silvertree2010: Grow table merges to include merged areas they overlap

2026-10-14 21:59:39 -04:00

ogg

Codecs: a hostile number is a format error, not an overflow

2026-10-13 20:16:51 +03:00

opus

Opus: validate the header in Decoder::from_head (#425)

2026-10-13 17:33:29 +02:00

pdf

fix(pdf): reconcile writer with notes and handout masters (PDFW)

2026-10-14 19:44:21 -06:00

pptx

M6.1: preserve PPTX trigger click steps

2026-10-15 22:31:32 +02:00

render

Fix up #747 and #772 from review: docs keep their status headers (log rows stay), no milestone renaming; the bullet test no longer saves screenshots; clippy's as_chunks in the bullet render test

2026-10-14 22:00:48 -04:00

text

PDFW2: integrate current main with shared PDF writing

2026-10-14 21:00:04 -06:00

ui-egui

Tests: fix two flakes (recovery lock held by a forked mkfifo; notes check not in yet)

2026-10-17 21:29:08 -04:00

vp9

Video: check the whole picture store against a memory budget (#398)

2026-10-13 20:58:31 +03:00