StreetblockandGPT-6 7fd610741b Fix PNG text metadata decode budget bypass (#1460) ...

Bound decoded PNG text and XMP by one shared max_alloc budget before
growing output, retaining CRC validation and malformed ancillary handling.
Cover compressed, plain, Unicode and post-IDAT metadata with small
synthetic regression fixtures, and document the budget's scope.

Opt Streetblock into public GitHub profile-name credits at their request.

Co-authored-by: GPT-6 (Codex) <noreply@openai.com>

2026-10-09 09:02:07 +07:00

..

contributors.json

About: contributor and model credits compiled in (grab bag + table, self-submitted names) (#898)

2026-10-07 21:22:11 -04:00

people.toml

Fix PNG text metadata decode budget bypass (#1460)

2026-10-09 09:02:07 +07:00