lightcraft

mirror of https://github.com/storytold/lightcraft.git synced 2026-10-31 21:48:53 -06:00

Files

T

Claude c2cdb112b7 LR-IMP-FORMATS: GIF and BMP sizes from the header; a canvas the file can't fill is refused (#2553 )

read_header had no reader for GIF or BMP and fell back to a full decode, so a few-dozen-byte file
declaring a canvas just under the 1-gigapixel limit made the import probe allocate ~4.3 GB; a
failed allocation aborts the process. A decode had the same allocation.

- other::header reads the size from the header. A canvas up to 4 MP is still decoded there, so
  truncated small files are refused at import as before.
- check_fillable refuses a canvas larger than the file's bytes can describe (BMP: 128 pixels per
  byte, covering 1-bit and RLE; GIF: 11,000, an LZW code of at least 3 bits expanding to at most
  4096 pixels), in both the probe and the decode, before the decoder allocates.
- The GIF and BMP decoders get an allocation limit (the RGBA buffer of max_pixels).

The approach follows the abandoned #2182 (PierrunoYT). JPEG XL still decodes in the probe.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01K93HTyCiwYvbRGaAkjPvXn

2026-10-22 10:55:54 -07:00

bench.rs

LR-EXP-TYPE: JPEG XL export (#247 )

2026-10-10 12:19:30 -04:00

corpus.rs

feat(testkit): #1037 tests record why they skip

2026-10-11 16:33:54 -05:00

float_tiff.rs

Issue #1952 : clip non-finite float image samples safely (#2071 )

2026-10-17 18:40:14 -06:00

fuzz.rs

LR-IMP-FORMATS: GIF and BMP sizes from the header; a canvas the file can't fill is refused (#2553 )