mirror of
https://github.com/storytold/photocraft.git
synced 2026-11-09 09:40:14 -06:00
The midpoint action checked `i + 1 >= v.len()` on the raw `index` param, so an index of usize::MAX overflowed (a panic with overflow checks on, a silent no-op success with them off). The shared index parser now takes the number of addressable entries and rejects an index past them before any arithmetic, for every action (move, delete, color, opacity, midpoint) and both kinds, so all of them validate the same way. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>