Brandon ThomasandClaude Opus 5.5 d1413d5209 Never crash: bound PSD descriptor nesting ...

The descriptor depth limit restarted at 0 inside every nested descriptor (Objc / GlbO /
ObAr), so a crafted file of 100 000 nested descriptors (2.4 MB) recursed until the stack
overflowed and aborted the app. The depth now carries through nested descriptors.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-04 14:05:55 -04:00

..

descriptor.rs

Never crash: bound PSD descriptor nesting

2026-10-04 14:05:55 -04:00

engine_data.rs

IO-2/SHP-5/PRV-2: PSD import, SVG import + vector/text conversions, persistent disk cache

2026-10-02 22:10:48 -04:00

lib.rs

Never crash: PSD reader bounds overflow and input-sized allocations

2026-10-04 12:27:18 -04:00

placed.rs

M13.6: PSD smart objects apply perspective quads and placed-layer warps

2026-10-03 07:21:00 -04:00

read.rs

IO-2/SHP-5/PRV-2: PSD import, SVG import + vector/text conversions, persistent disk cache

2026-10-02 22:10:48 -04:00

tests.rs

Never crash: PSD reader bounds overflow and input-sized allocations

2026-10-04 12:27:18 -04:00

write.rs

M13.6: PSD smart objects apply perspective quads and placed-layer warps

2026-10-03 07:21:00 -04:00