aiongg 306627ee77 fix(xfa): read a packet stream the XFA array lists again only once ...

The packet reader decoded the stream of every /XFA array entry and
charged only the decoded output to its 64 MB budget, so one stream that
decodes to almost nothing (Flate over hex whitespace), listed many
times, repeated a large decode for free. A stream reference already
read is skipped.

2026-10-22 17:08:55 +00:00

..

a11y

Merge r2 track t15: mixed: accessibility-tags, dialogs-prefs, javascript, organize-pages

2026-10-22 02:23:22 +00:00

annot

fix(annot): list a repeated link once and cap its web-address text

2026-10-22 17:08:54 +00:00

audit

Merge PR #2854: Redaction audit: an opaque filled Square annotation over text is a cover

2026-10-22 01:44:56 +00:00

automation

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

compare

…

content

Merge PR #3652: Keep filtered inline images whole when their data contains EI

2026-10-22 01:45:07 +00:00

cos

fix(cos): cap the objects one parsed object may build

2026-10-22 17:08:54 +00:00

create

fix(create): decode an indexed lookup table within a small cap

2026-10-22 17:08:54 +00:00

crypt

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

edit

Integration: subset fallback test names the face the build leads with (#2609 × #1760)

2026-10-22 04:15:17 +00:00

engine

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

export

Integration: #2994 put the part() doc comment back above part

2026-10-22 01:45:34 +00:00

filters

…

fonts

fix(fonts): decode Encoding and ToUnicode CMaps within 16 MiB

2026-10-22 17:08:54 +00:00

forms

Merge upstream main 88dad98dd into next

2026-10-22 05:22:09 +00:00

geom

…

js

Merge r2 track t15: mixed: accessibility-tags, dialogs-prefs, javascript, organize-pages

2026-10-22 02:23:22 +00:00

measure

fix(measure): a failed content decode uses up the snap byte budget

2026-10-22 17:08:54 +00:00

model

…

ocr

…

optimize

Merge PR #2321: fix(optimize): reject hostile image dimensions safely

2026-10-22 01:48:29 +00:00

oracle

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

organize

Merge r2 track t16: mixed: automation-mcp, crate:misc, crypt-security, export-convert, optimize, preflight-pdfa, save-io

2026-10-22 02:23:58 +00:00

platform

M1: resolve main integration for PR #3042

2026-10-19 18:43:18 +03:00

preflight

fix(preflight): decode an output-intent profile within 16 MiB

2026-10-22 17:08:54 +00:00

print

Integration: cargo fmt

2026-10-22 01:49:04 +00:00

redact

Merge r2 track t11: redaction, mixed: combine, compare, crate:edit, measure, ocr

2026-10-22 02:21:38 +00:00

render

fix(render): list a repeated annotation once and cap what the listing keeps

2026-10-22 17:08:54 +00:00

sign

fix(sign): read DSS revocation evidence one stream at a time within caps

2026-10-22 17:08:54 +00:00

testkit

Never-crash gate on the oracle and testkit crates; oracle find() no longer panics on an empty needle (#3435)

2026-10-19 13:01:03 -04:00

ui-egui

i18n(ui): carry the two new signature wordings in the catalogues that must cover them

2026-10-22 12:13:16 -04:00

xfa

fix(xfa): read a packet stream the XFA array lists again only once

2026-10-22 17:08:55 +00:00

xfdf

Merge r2 track t06: annotations-comments

2026-10-22 02:19:23 +00:00