Files
pdfcraft/vendor/lopdf/examples/delete_outlines.rs
Brandon ThomasandClaude Opus 5.5 1449b71a19 Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths
Fuzzed inputs drove one check-one process to 2-6 GB (the 16 GB CI runner
running two of them was killed every night). Three causes, each with a test:
- lopdf (bootstrap inspector) sized PNG predictor rows from /Columns before
  reading data: /Columns 4294967295 allocated two 4 GiB rows. Vendored lopdf
  0.45.0 refuses rows longer than the data (and uses saturating row widths);
  its load-time stream decoding also gets a 256 MiB limit (it had none).
- hayro sized a tiling pattern's cell pixmap from /XStep x scale, bounded only
  by u16: a step far beyond /BBox allocated 2 GB. The vendored patch keeps
  the cell within 3000 px a side, lowering the resolution instead.
- cos decoded cross-reference streams up to the general 1 GiB limit; they now
  stop at what 8,388,607 objects' rows can hold (~200 MB at most), and the
  section is reconstructed (logged) instead.

On the nightly's seed (41) the worst captured input fell from 6.2 GB to 6 MB,
and a 300 s fuzz run had no process above 300 MB (before: many at 2-5 GB).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-04 17:59:25 -04:00

47 lines
1.1 KiB
Rust

use std::env;
use std::path::{Path, PathBuf};
use lopdf::Document;
#[cfg(feature = "async")]
use tokio::runtime::Builder;
fn main() -> Result<(), Box<dyn std::error::Error>> {
let input = match env::args_os().nth(1) {
Some(input) => PathBuf::from(input),
None => panic!("Please provide a PDF file as first argument"),
};
let output = output_path(&input);
let mut doc = load_document(&input)?;
doc.delete_outlines()?;
doc.save(&output)?;
println!("Saved {}", output.display());
Ok(())
}
fn output_path(input: &Path) -> PathBuf {
let stem = input
.file_stem()
.expect("input file has no file stem")
.to_string_lossy();
input.with_file_name(format!("{stem}-NOTOC.pdf"))
}
#[cfg(not(feature = "async"))]
fn load_document<P: AsRef<Path>>(path: P) -> Result<Document, lopdf::Error> {
Document::load(path)
}
#[cfg(feature = "async")]
fn load_document<P: AsRef<Path>>(path: P) -> Result<Document, lopdf::Error> {
Builder::new_current_thread()
.enable_all()
.build()
.unwrap()
.block_on(async move { Document::load(path).await })
}