aiongg cccd435a53 fix(redact): bound image decoding by the declared raster size ...

Clearing the pixels of a partly covered image decoded its stream with
the global 1 GiB allowance and only then cut it to the raster length its
Width, Height and bit depth declare. A small Flate stream could make
every such image allocate and inflate far more than it can use. Decoding
now stops at twice the raster plus a byte per row (filter-chain and
predictor overhead) and a little slack; an image past that is removed
whole, as an undecodable one already is.

2026-10-22 15:17:44 -04:00

..

tests

fix(redact): bound image decoding by the declared raster size

2026-10-22 15:17:44 -04:00

codes.rs

M8: redaction code sets (U.S. FOIA, Privacy Act) as overlay text (#741)

2026-10-10 06:27:26 -04:00

image.rs

fix(redact): bound image decoding by the declared raster size

2026-10-22 15:17:44 -04:00

interp.rs

fix(redact): unlink removed XObjects from surviving forms' resources

2026-10-22 15:17:44 -04:00

lib.rs

fix(redact): check every input content stream, whatever it calls itself

2026-10-22 15:17:44 -04:00

overlay.rs

M8: Bound and reuse repeated redaction overlays (#1426)

2026-10-15 02:16:56 -04:00

patterns.rs

Merge PR #3237: M8: phone pattern finds slashed and labelled unseparated numbers (#3205)

2026-10-22 01:44:44 +00:00

sanitize.rs

fix(redact): charge repeated name-tree kids to the node budget

2026-10-22 13:28:40 -04:00

tags.rs

M8: tag cleanup refuses what it can't finish instead of removing the tree (#3302)

2026-10-19 03:20:34 +08:00

tests.rs

fix(redact): bound image decoding by the declared raster size

2026-10-22 15:17:44 -04:00