aiongg 77ee1c8a26 fix(sign): read DSS revocation evidence one stream at a time within caps ...

Revocation checking decoded every /CRLs and /OCSPs entry under the
general 1 GiB stream limit and kept them all before parsing any, so one
compressed stream referenced many times multiplied decoding and memory.
Evidence now decodes lazily, each stream once and within the 2 MiB
evidence cap, with at most 1024 entries and 64 MiB per array.

2026-10-22 17:08:54 +00:00

..

a11y

Merge r2 track t15: mixed: accessibility-tags, dialogs-prefs, javascript, organize-pages

2026-10-22 02:23:22 +00:00

annot

fix(annot): list a repeated link once and cap its web-address text

2026-10-22 17:08:54 +00:00

audit

Merge PR #2854: Redaction audit: an opaque filled Square annotation over text is a cover

2026-10-22 01:44:56 +00:00

automation

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

compare

…

content

Merge PR #3652: Keep filtered inline images whole when their data contains EI

2026-10-22 01:45:07 +00:00

cos

fix(cos): cap the objects one parsed object may build

2026-10-22 17:08:54 +00:00

create

fix(create): decode an indexed lookup table within a small cap

2026-10-22 17:08:54 +00:00

crypt

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

edit

Integration: subset fallback test names the face the build leads with (#2609 × #1760)

2026-10-22 04:15:17 +00:00

engine

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

export

Integration: #2994 put the part() doc comment back above part

2026-10-22 01:45:34 +00:00

filters

…

fonts

fix(fonts): decode Encoding and ToUnicode CMaps within 16 MiB

2026-10-22 17:08:54 +00:00

forms

Merge upstream main 88dad98dd into next

2026-10-22 05:22:09 +00:00

geom

…

js

Merge r2 track t15: mixed: accessibility-tags, dialogs-prefs, javascript, organize-pages

2026-10-22 02:23:22 +00:00

measure

fix(measure): a failed content decode uses up the snap byte budget

2026-10-22 17:08:54 +00:00

model

…

ocr

fix(ocr): the text layer restores the rendering mode it sets (#3029) (#3033)

2026-10-18 03:12:37 -04:00

optimize

Merge PR #2321: fix(optimize): reject hostile image dimensions safely

2026-10-22 01:48:29 +00:00

oracle

Build each crate's integration tests as one binary (#4087)

2026-10-22 11:28:58 -04:00

organize

Merge r2 track t16: mixed: automation-mcp, crate:misc, crypt-security, export-convert, optimize, preflight-pdfa, save-io

2026-10-22 02:23:58 +00:00

platform

M1: resolve main integration for PR #3042

2026-10-19 18:43:18 +03:00

preflight

fix(preflight): decode an output-intent profile within 16 MiB

2026-10-22 17:08:54 +00:00

print

Integration: cargo fmt

2026-10-22 01:49:04 +00:00

redact

Merge r2 track t11: redaction, mixed: combine, compare, crate:edit, measure, ocr

2026-10-22 02:21:38 +00:00

render

fix(render): list a repeated annotation once and cap what the listing keeps

2026-10-22 17:08:54 +00:00

sign

fix(sign): read DSS revocation evidence one stream at a time within caps

2026-10-22 17:08:54 +00:00

testkit

Never-crash gate on the oracle and testkit crates; oracle find() no longer panics on an empty needle (#3435)

2026-10-19 13:01:03 -04:00

ui-egui

i18n(ui): carry the two new signature wordings in the catalogues that must cover them

2026-10-22 12:13:16 -04:00

xfa

Integration: a non-interactive XFA field is measured at the width it is drawn (#3515 × #3521)

2026-10-22 04:15:17 +00:00

xfdf

Merge r2 track t06: annotations-comments

2026-10-22 02:19:23 +00:00