3 people 6e04f6eed7 fix(redact): size image clearing with checked arithmetic (#2177) (#2221) ...

* fix(redact): size image clearing with checked arithmetic (#2177)

An ICCBased image's /N comes from the file and was cast with `as usize`, then multiplied
unchecked into the row size. /N 2^60 overflowed it (debug: overflow panic; release: a zero row
emptied the buffer and the write loop indexed out of bounds), and a negative /N wrapped.

/N is now limited to 1, 3 or 4 (ISO 32000-2 §8.6.5.5), every size product is checked, and the
pixel writes use `get_mut`. An image that fails any of these is refused, and the caller already
removes it whole (fail-closed). Regression test covers /N 2^60, -1 and 2.

* redact tests: pass the pixel array by value (clippy needless_borrows_for_generic_args)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Brandon Thomas <echelon@gmail.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-15 02:50:02 -04:00

..

codes.rs

M8: redaction code sets (U.S. FOIA, Privacy Act) as overlay text (#741)

2026-10-10 06:27:26 -04:00

image.rs

fix(redact): size image clearing with checked arithmetic (#2177) (#2221)

2026-10-15 02:50:02 -04:00

interp.rs

Security: fix three audit findings in redaction and signature validation (#1631)

2026-10-13 00:14:40 -04:00

lib.rs

XFA: flatten a form into a plain PDF, or convert it to a static form (#1948)

2026-10-15 02:32:04 -04:00

overlay.rs

M8: Bound and reuse repeated redaction overlays (#1426)

2026-10-15 02:16:56 -04:00

patterns.rs

fix(redact): the tail of a longer number is not a phone number (#1884) (#1911)

2026-10-15 02:29:06 -04:00

sanitize.rs

Security: fix three audit findings in redaction and signature validation (#1631)

2026-10-13 00:14:40 -04:00

tags.rs

M8: Clean indirect and form tag references (#1351)

2026-10-12 05:43:12 -04:00

tests.rs

fix(redact): size image clearing with checked arithmetic (#2177) (#2221)

2026-10-15 02:50:02 -04:00