Ikki NishiharaandClaude Sonnet 5.5 8c665a19e2 PDF: bound what a FlateDecode stream may inflate to ...

inflate used the unbounded miniz_oxide functions, and File::parse decodes
every object stream eagerly. Use the limit variants (1 GiB per stream, 256 MiB
for object streams, a quarter of that on 32-bit targets) and bound the
truncated-stream salvage buffer too.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-10 17:29:44 +09:00

..

automation

Text: text layers are always rasterised at their on-screen scale (#390)

2026-10-09 23:17:32 +07:00

av1enc

G2: improve editing reliability and Windows rendering fidelity

2026-10-06 00:00:31 -05:00

color

G2: improve editing reliability and Windows rendering fidelity

2026-10-06 00:00:31 -05:00

effects

Effects: CC Particle World follows the comp camera (#397)

2026-10-10 00:35:25 +07:00

engine

Effects: OCIO custom configs read Blender's v2 transforms and warn (#410)

2026-10-09 23:57:12 +07:00

export

Export: a Render Queue job renders every frame on the project's renderer (#414)

2026-10-09 22:26:17 +07:00

expr

Merge pull request #6 from storybored379/pr/expr-runtime-stack-leak

2026-10-05 12:10:53 +07:00

geom

Never crash: deny panic lints in the already-clean crates and apps

2026-10-04 14:52:39 -04:00

gpu

Effects: CC Particle World follows the comp camera (#397)

2026-10-10 00:35:25 +07:00

hevcenc

Untrack crates/hevcenc/target (36 MB of build output) and ignore nested target/

2026-10-06 15:02:20 -04:00

host

Effects: EXtractoR picks layers and channels of multi-layer EXRs (#295)

2026-10-09 17:32:09 +07:00

interchange

Never crash: reject timeline documents nested too deeply

2026-10-04 14:05:57 -04:00

keyframe

Plug-ins: Ease Presets moves out of core into a bundled ScriptUI panel

2026-10-09 21:03:12 +07:00

lottie

G2: improve editing reliability and Windows rendering fidelity

2026-10-06 00:00:31 -05:00

media

Audio: a FLAC opens once and off the UI thread; conforming is bounded (#408)

2026-10-10 00:53:21 +07:00

model

G2: improve editing reliability and Windows rendering fidelity

2026-10-06 00:00:31 -05:00

opusenc

G2: improve editing reliability and Windows rendering fidelity

2026-10-06 00:00:31 -05:00

path

G2: improve editing reliability and Windows rendering fidelity

2026-10-06 00:00:31 -05:00

pdf

PDF: bound what a FlateDecode stream may inflate to

2026-10-10 17:29:44 +09:00

plugin

G2: improve editing reliability and Windows rendering fidelity

2026-10-06 00:00:31 -05:00

project

Import: Interpret Footage ▸ Preserve RGB keeps the file's values (#411)

2026-10-09 23:57:12 +07:00

psd

G2: improve editing reliability and Windows rendering fidelity

2026-10-06 00:00:31 -05:00

raster

Effects: EXtractoR picks layers and channels of multi-layer EXRs (#295)

2026-10-09 17:32:09 +07:00

render

Effects: CC Particle World follows the comp camera (#397)

2026-10-10 00:35:25 +07:00

script

Plug-ins: Ease Presets moves out of core into a bundled ScriptUI panel

2026-10-09 21:03:12 +07:00

segment

Merge pull request #374 from storytold/fix/368-tflite-budgets

2026-10-09 09:25:24 -04:00

svg

G2: improve editing reliability and Windows rendering fidelity

2026-10-06 00:00:31 -05:00

text

UI: Arabic, Hebrew, Indic and Thai names can be typed and are drawn (#394)

2026-10-10 00:53:21 +07:00

time

Never crash: Tick and timecode arithmetic can't overflow or divide by zero

2026-10-04 14:20:33 -04:00

track

G2: improve editing reliability and Windows rendering fidelity

2026-10-06 00:00:31 -05:00

ui-egui

Audio: a FLAC opens once and off the UI thread; conforming is bounded (#408)

2026-10-10 00:53:21 +07:00

vp9enc

VP9: frames never end in a byte that reads as a superframe marker (#161)

2026-10-07 14:15:33 +07:00