Dylan M. Taylor 7e409a3706 security(engine): one unpack budget across a preset zip's packs; linear comment skipping; small zip errors (#3675) ...

* security(engine): one unpack budget across a preset zip's packs; linear comment skipping; small zip errors

* address review: charge a failed pack's unpacked bytes to the shared zip budget

* address review: charge a corrupt deflate entry's partial output to the shared budget

* address review: an entry past its stated size spends only what it unpacked

2026-11-10 18:06:04 -05:00

..

catalog

LR-IMP-FORMATS: withdraw compressed ORF decoding pending provenance review (#3916)

2026-11-07 15:56:03 +01:00

codecs

Culling: the loupe uses built previews; photos prepared ahead and in the background (#3077)

2026-11-05 08:32:26 +01:00

color

Merge PR #2712: Never crash: NaN in tone curves and an i16::MIN UTC offset (#2579 items 3 and 4)

2026-10-31 02:08:23 +00:00

denoise

LR-EDIT-DETAIL-DENOISE: built-in BM3D denoising with GPU acceleration (#2982)

2026-11-05 09:36:22 +01:00

denoise-core

LR-EDIT-DETAIL-DENOISE: built-in BM3D denoising with GPU acceleration (#2982)

2026-11-05 09:36:22 +01:00

develop

Merge main into crystal-grain; the crystal grain moves to process V7

2026-11-07 10:53:18 +11:00

engine

security(engine): one unpack budget across a preset zip's packs; linear comment skipping; small zip errors (#3675)

2026-11-10 18:06:04 -05:00

faces

security(engine, faces): index repeated membership scans in photo move, keywords, import planning, sync and rename (#3709)

2026-11-03 17:48:05 -05:00

fetch

Merge PR #3283: Refuse a signed or malformed Content-Length in HTTP responses

2026-10-31 02:06:44 +00:00

film

Convert Negative 1/4: lightcraft-film, the negative conversion maths from Film Lab (#2490)

2026-11-05 05:31:15 +01:00

geocode

security(geocode): bound dataset reads, per-line fields, and the inflate error text (#3718)

2026-11-03 17:48:25 -05:00

geom

Integration: cargo fmt

2026-10-31 02:22:11 +00:00

gpu

Merge main into crystal-grain; the crystal grain moves to process V7

2026-11-07 10:53:18 +11:00

heif

refactor(heif): isolate SPS VUI parsing

2026-10-28 03:24:18 +00:00

inpaint

…

lensdb

Merge remote-tracking branch 'origin/main' into pr-2676

2026-11-04 13:14:40 +01:00

mcp

Import review: an optional batch-edit recipe for newly imported photos (#2940)

2026-11-06 01:23:04 +01:00

merge

Keep a stitched panorama at the photos' own resolution (#3806)

2026-11-05 23:01:24 +01:00

meta

never-crash: deny the panic lints in every crate root; GPU asserts become fail paths (#2137) (#2170)

2026-11-06 00:29:41 +01:00

pipeline

LR-EDIT-EFFECTS-GRAIN: review fix (a draft waits when nothing can stand in)

2026-11-07 11:06:06 +11:00

preview

Culling: the loupe uses built previews; photos prepared ahead and in the background (#3077)

2026-11-05 08:32:26 +01:00

raster

LR-EDIT-DETAIL-SHARPEN: Radius and Detail work, and sharpening acts at pixel scale (#757) (#762)

2026-11-05 05:21:13 +01:00

raw

Merge pull request #3887 from eliets2/fix/issue-2028-kelvin-white-balance-missing-for-dxo-dem

2026-11-07 16:21:33 +01:00

scenes

refactor(scenes): model water lighting parameters

2026-10-28 03:24:18 +00:00

segment

security(raster, segment): resample tall narrow images columns first (#3678)

2026-11-03 23:00:51 -05:00

slideshow

test: pin three linked margin keys boundary and wrap merged doc comment

2026-11-02 04:33:24 +00:00

sysmem

docs: tidy agent, contributor and asset docs

2026-10-31 04:17:15 +00:00

testkit

security: bounded keyword, repair and journal-recovery work (CodeRabbit) (#2763)

2026-10-23 22:45:21 -04:00

tiff

security/meta,merge,raw,tiff,denoise: bound memory sized by attacker-shaped inputs

2026-10-25 15:42:19 -04:00

ui-egui

LR-VIEW-SURVEY: merge main (#3842: photo_tile also returns the painted rect; the survey ignores it)

2026-11-10 16:03:14 +01:00

wincolor

LR-PREF-DISPLAY: wincolor inherits the workspace lints

2026-11-02 21:32:24 -08:00