23 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Earl Co	70d0260b6e	security(dnx): validate fields before frame allocation (#2914)	2026-10-23 10:53:38 -04:00
3 people	7f8c9921a1	security(engine): confine stored media filesystem access (#2869) ... * security(engine): confine stored media filesystem access * relink: index symlinked files; skip only symlinked folders Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Brandon Thomas <brandon@storyteller.ai> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 10:53:29 -04:00
3 people	875eec90e9	security(render): bound expanded frame plans (#2942) ... * security(render): bound expanded frame plans * render: count plan layers as they are pushed instead of re-summing every step Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Brandon Thomas <brandon@storyteller.ai> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 10:53:24 -04:00
3 people	1c40c48289	security(mxf): share resolved descriptor metadata (#2949) ... * security(mxf): share resolved descriptor metadata * mxf: keep every source-package track in the no-material-package fallback Two packages may reuse a track id and number; comparing only those dropped a real track. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Brandon Thomas <brandon@storyteller.ai> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 10:53:19 -04:00
Earl Co	66da0e5270	security(avi): bound OpenDML index work (#2925)	2026-10-23 10:53:09 -04:00
Earl Co	a6ed3ecd14	security(text): bound transformed glyph masks (#2900)	2026-10-23 10:53:05 -04:00
Earl Co	71d5f52b4d	security(opus): validate direct multistream headers (#2905)	2026-10-23 10:53:00 -04:00
3 people	68cfb0b52d	security(text): keep font scans within configured folders (#2876) ... * security(text): keep font scans within configured folders * fonts: still find symlinked font files; skip only symlinked folders Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fonts: rustfmt Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Brandon Thomas <brandon@storyteller.ai> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 10:52:49 -04:00
3 people	d3ec344691	security(ui): bound export folder elision work (#2902) ... * security(ui): bound export folder elision work * export mode: keep location_link's doc comment on the function Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Brandon Thomas <brandon@storyteller.ai> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 10:52:45 -04:00
3 people	441e80b7a6	security(tts): make malformed-token scanning linear (#2871) ... * security(tts): make malformed-token scanning linear * tts-text: find a pause marker's ] by byte, so a multi-byte character at byte 64 doesn't hide it Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Brandon Thomas <brandon@storyteller.ai> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 10:52:40 -04:00
3 people	599516dc1c	fix(control): bound synthetic pointer events (#2868) ... * fix(control): bound synthetic pointer events * control: check ui.click's count before queuing any input events Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Brandon Thomas <brandon@storyteller.ai> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 10:52:35 -04:00
3 people	9722d77aa5	security(engine): bound graphic template thumbnails (#2887) ... * security(engine): bound graphic template thumbnails * graphic templates: scale a capped thumbnail to fit both sides of the canvas Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Brandon Thomas <brandon@storyteller.ai> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 10:52:30 -04:00
Earl Co	ebe15de141	security(bench): isolate temporary export outputs (#2928) ... * security(bench): isolate temporary export outputs * chore(bench): record tempfile dependency	2026-10-23 10:52:26 -04:00
Earl Co	73265622b2	security(h264enc): cache second-pass plan sums (#2906)	2026-10-23 10:52:21 -04:00
Earl Co	cbeb748ecc	security(matroska): compose stripped private data once (#2911)	2026-10-23 10:52:17 -04:00
Earl Co	370019bdfc	security(isobmff): bound metadata expansion (#2933)	2026-10-23 10:52:13 -04:00
Earl Co	ccb80b2e9d	security(platform): bound hybrid replay output (#2938)	2026-10-23 10:52:08 -04:00
Earl Co	8fa72cf18d	security(codecs): avoid quadratic MPEG timestamp lookup (#2883)	2026-10-23 10:52:03 -04:00
Earl Co	19ff23cba3	security(hevc): validate slice payload before allocation (#2939)	2026-10-23 10:51:59 -04:00
3 people	04a4a7bc72	security(proxies): reserve outputs atomically (#2922) ... * security(proxies): reserve outputs atomically * proxies: ReservedOutput::file returns an Option instead of expect() Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Brandon Thomas <brandon@storyteller.ai> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-23 10:51:54 -04:00
Earl Co	f6e053b352	security(text): bound text and phonemizer work (#2870) ... * security(text): bound layout and font-name work * security(tts): bound phonemizer input expansion	2026-10-23 10:51:44 -04:00
Earl Co	199b70c1d1	security(interchange): bound imported track indices (#2910)	2026-10-23 10:51:39 -04:00
Earl CoandCodex	8309f21a6c	fix(export): prevent nested renderer-pool deadlocks ... Bound outer export batches by actual renderer-pool capacity before nested Rayon work can steal a sibling frame. Cover image sequences, GIF, stepped export and overlapping audio with the original one-renderer regression. Addresses #1956. Full original GPU contribution preserved at `preserve/861-gpu-export-original` (674e8cd68d). Co-authored-by: Codex <noreply@openai.com>	2026-10-14 23:05:50 -06:00