mirror of
https://github.com/storytold/pdfcraft.git
synced 2026-10-25 02:29:31 -06:00
Fuzzed inputs drove one check-one process to 2-6 GB (the 16 GB CI runner running two of them was killed every night). Three causes, each with a test: - lopdf (bootstrap inspector) sized PNG predictor rows from /Columns before reading data: /Columns 4294967295 allocated two 4 GiB rows. Vendored lopdf 0.45.0 refuses rows longer than the data (and uses saturating row widths); its load-time stream decoding also gets a 256 MiB limit (it had none). - hayro sized a tiling pattern's cell pixmap from /XStep x scale, bounded only by u16: a step far beyond /BBox allocated 2 GB. The vendored patch keeps the cell within 3000 px a side, lowering the resolution instead. - cos decoded cross-reference streams up to the general 1 GiB limit; they now stop at what 8,388,607 objects' rows can hold (~200 MB at most), and the section is reconstructed (logged) instead. On the nightly's seed (41) the worst captured input fell from 6.2 GB to 6 MB, and a 300 s fuzz run had no process above 300 MB (before: many at 2-5 GB). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
38 lines
983 B
Rust
38 lines
983 B
Rust
use lopdf::{Document, IncrementalDocument, Result};
|
|
use std::fmt::Display;
|
|
use std::path::Path;
|
|
|
|
#[allow(dead_code)]
|
|
pub fn load_document<P>(path: P) -> Result<Document>
|
|
where
|
|
P: AsRef<Path> + Display,
|
|
{
|
|
#[cfg(feature = "async")]
|
|
let doc = tokio::runtime::Runtime::new()?.block_on(async move {
|
|
Document::load(&path)
|
|
.await
|
|
.unwrap_or_else(|_| panic!("Failed to load {}", path))
|
|
});
|
|
#[cfg(not(feature = "async"))]
|
|
let doc = Document::load(path)?;
|
|
|
|
Ok(doc)
|
|
}
|
|
|
|
#[allow(dead_code)]
|
|
pub fn load_incremental_document<P>(path: P) -> Result<IncrementalDocument>
|
|
where
|
|
P: AsRef<Path> + Display,
|
|
{
|
|
#[cfg(feature = "async")]
|
|
let doc = tokio::runtime::Runtime::new()?.block_on(async move {
|
|
IncrementalDocument::load(&path)
|
|
.await
|
|
.unwrap_or_else(|_| panic!("Failed to load {}", path))
|
|
});
|
|
#[cfg(not(feature = "async"))]
|
|
let doc = IncrementalDocument::load(path)?;
|
|
|
|
Ok(doc)
|
|
}
|