FredApps 1c1eec5179 security(lensdb): refuse a non-regular *.xml before opening it (opening a FIFO blocks) ...

The pathname is checked before File::open as well as the opened file after it: File::open on a FIFO blocks until a writer appears, so the post-open check alone never ran for one. Adds a unix regression test that hung before the fix.

2026-11-04 11:58:39 +01:00

..

catalog

catalog: bound keyword list path expansion and index synonym merges (#3641)

2026-11-03 22:51:11 -05:00

codecs

Merge track r3-t08

2026-10-31 02:31:16 +00:00

color

Merge PR #2712: Never crash: NaN in tone curves and an i16::MIN UTC offset (#2579 items 3 and 4)

2026-10-31 02:08:23 +00:00

denoise

security/meta,merge,raw,tiff,denoise: bound memory sized by attacker-shaped inputs

2026-10-25 15:42:19 -04:00

denoise-core

security: staging and probe files are created new, never written through an existing entry (#3673)

2026-11-03 22:59:41 -05:00

develop

Merge track r3-t10

2026-10-31 02:31:38 +00:00

engine

security(engine): the library folder is protected from folder.move however its path is spelled (#3676)

2026-11-03 23:00:31 -05:00

faces

security(engine, faces): index repeated membership scans in photo move, keywords, import planning, sync and rename (#3709)

2026-11-03 17:48:05 -05:00

fetch

Merge PR #3283: Refuse a signed or malformed Content-Length in HTTP responses

2026-10-31 02:06:44 +00:00

geocode

security(geocode): bound dataset reads, per-line fields, and the inflate error text (#3718)

2026-11-03 17:48:25 -05:00

geom

Integration: cargo fmt

2026-10-31 02:22:11 +00:00

gpu

security(tests): test fixture directories are created exclusively, never reused from a predictable name (#3721)

2026-11-03 17:49:04 -05:00

heif

refactor(heif): isolate SPS VUI parsing

2026-10-28 03:24:18 +00:00

inpaint

Content-aware Remove: inpaint crate (PatchMatch completion) and a Fill spot mode

2026-10-11 19:30:42 +11:00

lensdb

security(lensdb): refuse a non-regular *.xml before opening it (opening a FIFO blocks)

2026-11-04 11:58:39 +01:00

mcp

Merge track r3-t06

2026-10-31 02:30:12 +00:00

merge

refactor(lightcraft-merge): move crates/merge/src/pano/mod.rs to crates/merge/src/pano.rs

2026-10-26 18:15:08 +00:00

meta

Integration: GPX attributes use decoded_and_normalized_value (deprecated method fails clippy)

2026-10-31 03:09:09 +00:00

pipeline

Merge track r3-t10

2026-10-31 02:31:38 +00:00

preview

security: staging and probe files are created new, never written through an existing entry (#3673)

2026-11-03 22:59:41 -05:00

raster

security(raster, segment): resample tall narrow images columns first (#3678)

2026-11-03 23:00:51 -05:00

raw

security(raw): linear sparse planning, distinct-byte allocation bound, opcode list budget, ORF strip length (#3679)

2026-11-03 22:32:53 -05:00

scenes

refactor(scenes): model water lighting parameters

2026-10-28 03:24:18 +00:00

segment

security(raster, segment): resample tall narrow images columns first (#3678)

2026-11-03 23:00:51 -05:00

slideshow

test: pin three linked margin keys boundary and wrap merged doc comment

2026-11-02 04:33:24 +00:00

sysmem

docs: tidy agent, contributor and asset docs

2026-10-31 04:17:15 +00:00

testkit

security: bounded keyword, repair and journal-recovery work (CodeRabbit) (#2763)

2026-10-23 22:45:21 -04:00

tiff

security/meta,merge,raw,tiff,denoise: bound memory sized by attacker-shaped inputs

2026-10-25 15:42:19 -04:00

ui-egui

#3601: rustfmt (drop the trailing blank line)

2026-11-03 08:36:22 -05:00