mirror of https://github.com/storytold/lightcraft.git synced 2026-10-26 11:09:23 -06:00

Files

T

Dylan M. Taylor d8ceb3a6af security/meta,merge,raw,tiff,denoise: bound memory sized by attacker-shaped inputs

XMP flattening, sparse-focus EXIF decode (plus the maker-note and TIFF value
budgets), lossy-DNG chunk staging, panorama stitch frames, the reference ONNX
executor's tensors and the denoise product reader all now reject or cap what a
malformed file can make them allocate: each result is checked before the
memory behind it is reserved, every regression carrying a test that fails
without its bound.

2026-10-25 15:42:19 -04:00

src

security/meta,merge,raw,tiff,denoise: bound memory sized by attacker-shaped inputs

2026-10-25 15:42:19 -04:00

tests

security/meta,merge,raw,tiff,denoise: bound memory sized by attacker-shaped inputs

2026-10-25 15:42:19 -04:00

Cargo.toml

security/meta,merge,raw,tiff,denoise: bound memory sized by attacker-shaped inputs

2026-10-25 15:42:19 -04:00

README.md

Reject non-finite denoise inputs and derived pixels

2026-10-14 02:11:50 +03:00

README.md

lightcraft-denoise-core

L1 model metadata, bounded archive/cache formats and Bayer packing/tiling helpers. No weights or inference backend. See the user workflow. lightcraft-denoise re-exports these types for CPU/GPU users; the engine uses this crate directly when inference is disabled. The default download catalog is empty. Run cargo test -p lightcraft-denoise-core; optional catalog checks use --features rawnind-model.

The Bayer runner rejects non-finite source samples before inference and non-finite results after gain matching, highlight protection and tile blending. Finite negative and HDR source samples remain supported. These guards do not implement Raw Details or Super Resolution.