Dylan M. Taylor cfd894aad3 security(paint): cap spaced steps and procedural primitives (#8957) ...

* security(paint): cap distance-spaced steps per segment and procedural tip primitives

* test(paint): count steps through a Cell so the walker closure can be shared

* paint: keep the spacing carry-over when a segment ends at the step cap; lower the tip work budget

2026-10-23 17:38:07 -04:00

..

affinity

security(affinity): charge shared-object expansion against document-wide budgets (#8938)

2026-10-23 14:30:21 -04:00

algo

security(algo): bound working sets sized by caller-controlled extents (#8946)

2026-10-23 15:22:24 -04:00

automation

Automation: exported layers keep linked smart objects as pixels in workspace sessions

2026-10-22 18:41:32 +00:00

cms

security: bisect flat-table and gradient-stop lookups; charge ICC curve samples; bound PSD planes, RAW ljpeg retention and TIFF dump preview

2026-10-23 14:41:53 -04:00

codecs

codecs: use u32 in the padded-truncated-JPEG test's bounds arithmetic (u64: From<i32> does not implement — E0277)

2026-10-23 15:08:50 -04:00

color

…

compose

security(compose): bound dense working sets and nested Blend If evaluation (#8949)

2026-10-23 15:33:01 -04:00

doc

security(raster,doc): count tile grids without walking them; share rebuilt tiles; index slice merges

2026-10-23 14:41:44 -04:00

engine

deps: roxmltree 0.21 in photocraft-io and photocraft-engine (#8973)

2026-10-23 17:06:29 -04:00

format

fix(format): preserve user umask on atomic_write, 0600 only internal files, nonblocking sidecar/file reads

2026-10-22 19:35:51 -04:00

geom

security(raster,doc): count tile grids without walking them; share rebuilt tiles; index slice merges

2026-10-23 14:41:44 -04:00

gpu

Reuse filled-shape effect maps while moving styled groups (#8993)

2026-10-23 17:37:56 -04:00

heif

Keep tests correct and docs current with one test binary per crate

2026-10-22 16:55:34 +00:00

io

deps: roxmltree 0.21 in photocraft-io and photocraft-engine (#8973)

2026-10-23 17:06:29 -04:00

ipp

security(ipp): total reply deadline; resumable chunk walk

2026-10-23 14:41:49 -04:00

ops

…

paint

security(paint): cap spaced steps and procedural primitives (#8957)

2026-10-23 17:38:07 -04:00

plugins

security(plugins): reject host routing keys, bound bands and start fuel, open without blocking on FIFOs

2026-10-23 14:41:52 -04:00

psd

security: bisect flat-table and gradient-stop lookups; charge ICC curve samples; bound PSD planes, RAW ljpeg retention and TIFF dump preview

2026-10-23 14:41:53 -04:00

raster

security(raster,doc): count tile grids without walking them; share rebuilt tiles; index slice merges

2026-10-23 14:41:44 -04:00

raw

security: bisect flat-table and gradient-stop lookups; charge ICC curve samples; bound PSD planes, RAW ljpeg retention and TIFF dump preview

2026-10-23 14:41:53 -04:00

tablet

…

testkit

Tests: report a bad PHOTOCRAFT_SWEEP_PART with assert!, which testkit's lints allow

2026-10-23 16:49:11 +00:00

text

fix(text): bound untrusted font and PSD text processing (#8768)

2026-10-23 09:40:04 -04:00

ui-egui

fix(ui-egui): a click on the bottom layer's Smart Filters selects them again (#8764) (#8974)

2026-10-23 17:38:02 -04:00

vector

security: bisect flat-table and gradient-stop lookups; charge ICC curve samples; bound PSD planes, RAW ljpeg retention and TIFF dump preview

2026-10-23 14:41:53 -04:00