mirror of
https://github.com/storytold/photocraft.git
synced 2026-11-12 00:49:14 -06:00
A tiny file declaring a huge image reserved the full output buffer before any data was checked. Add Limits::check_plausible (compression-ratio guard) and a fallible alloc_zeroed, use them in PNG and WebP, and lower the 32-bit default max_alloc to 1 GiB. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>