Dylan M. Taylor bf98617e20 security(io): apply caller limits to RAW preview decoding ...

upright_preview decoded a raw file's embedded JPEG with default codec
options, discarding the caller's DevelopOptions.limits. A compressed
embedded preview could therefore allocate and process far more pixel
data than the caller authorized during the fallback and color-fit paths.

Pass the caller's limits into upright_preview and translate them into
the JPEG DecodeOptions, so both the Unsupported fallback and the
preview look-fit respect the same policy.

Finding: d17bc286-6765-41ce-bd41-579ee5b75cfa (CWE-409)

2026-10-22 07:10:28 -04:00

..

examples

Merge PR #5109: Tests: generated large-file fixtures and a P20 number (#5107)

2026-10-21 01:06:10 +00:00

src

security(io): apply caller limits to RAW preview decoding

2026-10-22 07:10:28 -04:00

tests

Merge main into integration-10

2026-10-21 21:56:26 +00:00

Cargo.toml

Linked smart objects: follow stored paths only to local files or the document's share

2026-10-16 16:53:13 +00:00