Dylan M. Taylor d8ceb3a6af security/meta,merge,raw,tiff,denoise: bound memory sized by attacker-shaped inputs ...

XMP flattening, sparse-focus EXIF decode (plus the maker-note and TIFF value
budgets), lossy-DNG chunk staging, panorama stitch frames, the reference ONNX
executor's tensors and the denoise product reader all now reject or cap what a
malformed file can make them allocate: each result is checked before the
memory behind it is reserved, every regression carrying a test that fails
without its bound.

2026-10-25 15:42:19 -04:00

..

product_heap.rs

security/meta,merge,raw,tiff,denoise: bound memory sized by attacker-shaped inputs

2026-10-25 15:42:19 -04:00