Dylan M. Taylor d00df6319c security/raw: bound hostile-memory paths in raw decoders ...

Sparse walkers, truncated MEF/lossy-JPEG strips, embedded JPEG sizes, the
CR3 preview marker walk, OpcodeList3 full-image passes and caller-supplied
Deflate tile edges each let a small file or one bad argument multiply
allocations or CPU work thousands of times. Each path now is bounded,
every fix with a regression test that failed (or blew up) before it, plus
a tiff::image single_chunk helper so preview extraction never builds a
descriptor vector for a hostile multi-strip layout.

2026-10-25 15:42:19 -04:00

..

examples

Merge PR #1475 (rebased)

2026-10-15 01:13:36 -04:00

src

security/raw: bound hostile-memory paths in raw decoders

2026-10-25 15:42:19 -04:00

tests

Merge PR #2620

2026-10-23 17:21:16 -04:00

Cargo.toml

Merge PR #1135 (rebased)

2026-10-15 00:53:45 -04:00