Ikki NishiharaandClaude Sonnet 5.5 559859ca61 lopdf: bound object lookups through compressed containers and object-stream members (#771) ...

A compressed object's container was resolved with a fresh cycle set and
without checking that it is an ordinary object, and indirect /Length
chains had no depth limit, so self-containing or chained lookups
overflowed the stack. Pass the caller's set on, require an in-file
container and cap the chain at 16 lookups. Object-stream members were
each parsed to the end of the decoded stream, so repeated or nested
offsets kept many copies of one large object: parse each member within
its own extent and skip repeated offsets.

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-10 15:51:25 -04:00

..

common_data_structures

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

encodings

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

encryption

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

filters

M2: bound lopdf predictor scratch to available samples (#470)

2026-10-09 09:21:21 -04:00

parser

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

bookmarks.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

cmap_section.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

content.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

creator.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

datetime.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

destinations.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

document.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

encryption.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

error.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

font.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

incremental_document.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

lib.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

load_options.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

object_stream.rs

lopdf: bound object lookups through compressed containers and object-stream members (#771)

2026-10-10 15:51:25 -04:00

object.rs

M2: bound lopdf predictor scratch to available samples (#470)

2026-10-09 09:21:21 -04:00

outlines.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

parser_aux.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

processor.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

reader.rs

lopdf: bound object lookups through compressed containers and object-stream members (#771)

2026-10-10 15:51:25 -04:00

save_options.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

toc.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

writer.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

xobject.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00

xref.rs

Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths

2026-10-04 17:59:25 -04:00