3 people 73a56d7603 Format: overflow-safe blob decode and bounds-checked ZIP reads (#3486) (#3501) ...

- store: `max_blob_bytes as u64 + 1` overflowed for usize::MAX (debug
  panic; release take(0), so every blob failed). The blob read and the
  tile decode now share decompress_bounded(), which saturates.
- zip: ZipReader::read sliced `data_offset..data_offset + compressed`
  unchecked although Entry is pub + Clone; a foreign entry is now a
  Corrupt error.
- store: Collect::tile reuses tile_le(); Object::content() gives the
  stored bytes once (existing_object_is_valid no longer builds them twice).

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Brandon Thomas <echelon@gmail.com>

2026-10-12 10:08:20 -04:00

..

common

feat(ui): Photoshop's New Guide: units and colour (#3553)

2026-10-12 00:46:56 -04:00

analysis.rs

Format: adopt the craft-family rustfmt.toml and format the workspace

2026-10-04 11:31:17 -04:00

autosave.rs

Autosave: best-effort cleanup after commit; sweep orphaned recovery bundles (#3489) (#3502)

2026-10-11 23:31:23 -04:00

corruption.rs

Format: overflow-safe blob decode and bounds-checked ZIP reads (#3486) (#3501)

2026-10-12 10:08:20 -04:00

layer_labels.rs

Add layer and group color labels (#1283) (#1289)

2026-10-08 20:32:09 -04:00

roundtrip.rs

Security: harden document exports and automation inputs (#2269)

2026-10-11 23:18:52 -06:00

smart_contents.rs

Keep duplicated Smart Objects linked to shared contents (#2222)

2026-10-10 05:05:56 -04:00