dwetscherandClaude Opus 5.5 f73a3df974 AF.5: bound hostile Affinity files; fuzz the new import paths ...

- One budget for the whole read (layers, pixels, characters, table
  cells), shared with embedded documents and charged also when their
  reading fails; the first reading is dropped before the second.
- Tables: at most 65 536 cells; lines and cell formats that don't
  match the grid are left out instead of shifted.
- Paragraph formats matched to runs by binary search; font names
  longer than 256 bytes are dropped.
- Overlays: one work budget per import; encoded originals decoded
  within their layer's size; table cell outlines recoloured too.
- Engine: master page copies capped, each page's master found in
  linear time, line gaps looked up once per font, the working CMYK
  table built once, objects past MAX_COORD left out.
- Embedded content stays with its node; pixel masks under artistic
  text are read whole and include stroke reach; gradient overlays on
  hidden layers are kept.
- Render: contexts and raster effect images stay within
  MAX_RASTER_SIDE per side (vello overflowed near u16::MAX; found by
  the new fuzz target).
- Tests: affinity tests/import_limits.rs, feature samples in
  import_fuzz.rs, shared builders in engine/tests/support/.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-22 18:24:57 +07:00

..

cmd

AF.5: bound hostile Affinity files; fuzz the new import paths

2026-10-22 18:24:57 +07:00

file_access.rs

Fix #832: --automation-read-root and --automation-write-root confine the MCP server's files

2026-10-10 14:27:24 +07:00

guard.rs

…

inspect.rs

M1: support dragging editable artwork between document tabs

2026-10-22 00:48:57 +03:00

journal.rs

Actions: a recording keeps its steps when a canceled undo group drops earlier entries

2026-10-21 16:46:18 +07:00

lib.rs

Package: File › Package collects and writes the package on the background thread

2026-10-22 17:20:48 +07:00

link_watch.rs

Links: follow linked file paths only on this computer or the document's share

2026-10-16 17:55:48 +00:00

namematch.rs

Keyboard Shortcuts: shortcut set reading and matching stay bounded on hostile files

2026-10-14 13:49:59 +07:00

steps.rs

Part of #785: run and command_batch steps can use earlier results

2026-10-10 10:28:03 +07:00

store.rs

Build: the wasm check is warning-free; one file-dialog check instead of two

2026-10-21 16:46:41 +07:00

tests_adjust.rs

#1244: smaller objects: Node 352 -> 152 bytes, NodeKind 200 -> 80, and a cheaper undo estimate

2026-10-12 11:02:32 +07:00

tests_appearance.rs

Commands: Transform Each, artboards and more refuse a boolean or number given as text

2026-10-22 06:40:27 +07:00

tests_areafit.rs

Export: PDF, EPS, SVG, EMF, WMF and image exports warn about type that doesn't fit its frame

2026-10-17 17:13:03 +07:00

tests_assets.rs

G12: Collect for Export from Layers panel and layer ids

2026-10-16 06:16:36 +07:00

tests_attributes.rs

#1244: smaller objects: Node 352 -> 152 bytes, NodeKind 200 -> 80, and a cheaper undo estimate

2026-10-12 11:02:32 +07:00

tests_bboxrotate.rs

…

tests_blendfidelity.rs

#1244: smaller objects: Node 352 -> 152 bytes, NodeKind 200 -> 80, and a cheaper undo estimate

2026-10-12 11:02:32 +07:00

tests_blendopts.rs

Blend: Ease In / Ease Out and separate Color Ease in Blend Options (#1124)

2026-10-22 04:40:10 +07:00

tests_blendspine.rs

Commands: a boolean or number given as text is refused

2026-10-22 00:10:57 +07:00

tests_brushsym.rs

Commands: Transform Each, artboards and more refuse a boolean or number given as text

2026-10-22 06:40:27 +07:00

tests_build.rs

Commands: Transform Each, artboards and more refuse a boolean or number given as text

2026-10-22 06:40:27 +07:00

tests_cancel.rs

MCP: cancel long exports, answer while one runs, report progress (#2165, #2171, #2172)

2026-10-17 13:49:48 +07:00

tests_charstroke.rs

Align Stroke on live type: tests for the Type tool's selection, docs (#2294)

2026-10-16 15:27:54 +07:00

tests_clip.rs

Fix #3188: arranging art inside a clipping mask keeps the clipping path at the bottom

2026-10-21 15:42:35 +07:00

tests_clipboard.rs

M1: reconcile tab drag with upstream and document transfer contracts

2026-10-22 03:08:30 +03:00

tests_clipflavours.rs

Clipboard: a copied .ai or .ait file pastes the objects of its editing data (#2408)

2026-10-20 07:23:40 +07:00

tests_clippaint.rs

…

tests_cmdsplit.rs

…

tests_cmykflatten.rs

…

tests_colorguide.rs

…

tests_colorguidelib.rs

…

tests_colormgmt.rs

View: Proof Setup simulates tritanopia

2026-10-16 02:26:04 +07:00

tests_colorthemes.rs

Color: type, gradient, mesh and swatch commands store RGB input as color-managed CMYK in a CMYK document

2026-10-18 12:34:40 +07:00

tests_containers.rs

Appearance: image fills and strokes draw the shape Convert to Shape or Outline Object gives them

2026-10-20 02:06:54 +07:00

tests_css.rs

Add a generic family to the font-family of SVG export and CSS (#3135)

2026-10-20 03:41:17 +07:00

tests_cut.rs

Review #986: the rect through finite_numbers; rustfmt

2026-10-11 01:45:18 +07:00

tests_dashalign.rs

…

tests_distort.rs

Commands: a boolean or number given as text is refused

2026-10-22 00:10:57 +07:00

tests_docsetup.rs

Type: superscript, subscript and small caps proportions out of range in a file are read in range

2026-10-18 01:21:24 +07:00

tests_draw2.rs

Commands: path.create with path data refuses closed given as text, and the grids refuse a count

2026-10-22 08:24:09 +07:00

tests_editcolors.rs

#1244: smaller objects: Node 352 -> 152 bytes, NodeKind 200 -> 80, and a cheaper undo estimate

2026-10-12 11:02:32 +07:00

tests_effectedit.rs

…

tests_emptytype.rs

Type: a click away from the text being edited ends editing without making new text

2026-10-18 23:50:57 +07:00

tests_envelope_distort.rs

#1244: smaller objects: Node 352 -> 152 bytes, NodeKind 200 -> 80, and a cheaper undo estimate

2026-10-12 11:02:32 +07:00

tests_envelope_edit.rs

Blends, meshes and envelopes: an index or count that is not a whole number is refused

2026-10-17 16:38:43 +07:00

tests_envelope.rs

Native reopen: type in symbols gets its layout bounds back (#1738)

2026-10-14 08:01:50 +07:00

tests_expand.rs

Tests: the Expand Appearance reply test fails when the reply leaves out the expanded object (#3374)

2026-10-22 07:03:54 +07:00

tests_eyedropper.rs

M3: preserve highlighted Eyedropper ranges and reject incompatible transparency

2026-10-22 02:58:48 +07:00

tests_file.rs

Templates: Save as Template always writes a file with a template extension

2026-10-17 13:52:06 +07:00

tests_fileinfo.rs

PDF export: PDF and .ai files carry File Info's copyright status, notice and URL

2026-10-21 23:32:26 +07:00

tests_flatpresets.rs

…

tests_flatpreview.rs

…

tests_flatten.rs

Effects: expanded, flattened and exported art keeps the random Transform the canvas drew

2026-10-21 23:14:34 +07:00

tests_focal.rs

…

tests_fontfiles.rs

Review fixes for #792: build expected test paths with the platform's separator

2026-10-10 09:07:53 +07:00

tests_fontlist.rs

Background save: dropped Puppet Warp pins, ended Edit Text and font scans leave the document saved

2026-10-17 17:13:03 +07:00

tests_freeform.rs

Commands: Transform Each, artboards and more refuse a boolean or number given as text

2026-10-22 06:40:27 +07:00

tests_gradient.rs

Commands: Transform Each, artboards and more refuse a boolean or number given as text

2026-10-22 06:40:27 +07:00

tests_gradpanel.rs

Commands: an index of 2^32 or more no longer wraps around on 32-bit builds

2026-10-21 23:38:03 +07:00

tests_gradspan.rs

paint.setFill / setStroke: span "selection" places one gradient across the targets (#2127)

2026-10-16 04:44:50 +07:00

tests_halftone.rs

Rasterize, Flatten Transparency: commands that replace art with a rendering warn about an undecodable image

2026-10-17 16:38:42 +07:00

tests_history_mem.rs

Fix #1719: Redo keeps a drag in progress as a step, as Undo does

2026-10-14 08:11:02 +07:00

tests_ids_without_selection.rs

Commands: ids leave out an object listed with a group that holds it, as the selection does

2026-10-16 06:16:35 +07:00

tests_inline.rs

…

tests_interactivity.rs

Window: the SVG Interactivity panel attaches JavaScript events and files for SVG export

2026-10-17 15:14:43 +07:00

tests_intertwine.rs

Fix #2540: Object → Expand expands Intertwine groups

2026-10-17 13:20:23 +07:00

tests_journal.rs

Undo groups: library styles and field scrubs close only the group they open

2026-10-21 16:46:19 +07:00

tests_keyguide.rs

G11: Align panel moves ruler guides to artboard (#3463)

2026-10-22 05:20:10 +07:00

tests_knockout.rs

…

tests_labspots.rs

…

tests_large_edits.rs

Commands: ids leave out an object listed with a group that holds it, as the selection does

2026-10-16 06:16:35 +07:00

tests_layerclip.rs

Fix #3188: arranging art inside a clipping mask keeps the clipping path at the bottom

2026-10-21 15:42:35 +07:00

tests_layers.rs

Commands: an index of 2^32 or more no longer wraps around on 32-bit builds

2026-10-21 23:38:03 +07:00

tests_legacy_ai.rs

Export: EPS, legacy .ai, EMF/WMF and DXF give one note for images that can't be decoded

2026-10-22 06:13:32 +07:00

tests_library.rs

Undo groups: library styles and field scrubs close only the group they open

2026-10-21 16:46:19 +07:00

tests_link_paths.rs

Links: a link on a drive mapped to another share is not followed

2026-10-21 15:42:35 +07:00

tests_linked_stops.rs

…

tests_linkfiles.rs

Importers: an SVG's linked files are read within the automation roots again

2026-10-14 10:13:45 +07:00

tests_links.rs

PDF/.ai import: a .ai saved without PDF compatibility is placed and pasted from its editing data

2026-10-21 17:11:08 +07:00

tests_linkspanel.rs

Images: the too-large note counts the image's pixels as RGBA

2026-10-17 16:38:42 +07:00

tests_linkwatch.rs

Linked files: a change during a drag is applied after the drag, not lost (#1722)

2026-10-13 18:17:02 +02:00

tests_liquify.rs

…

tests_live.rs

Commands: a boolean or number given as text is refused

2026-10-22 00:10:57 +07:00

tests_livecorners.rs

Commands: a boolean or number given as text is refused

2026-10-22 00:10:57 +07:00

tests_maskview.rs

…

tests_menucmds.rs

Commands: Transform Each, artboards and more refuse a boolean or number given as text

2026-10-22 06:40:27 +07:00

tests_nativefile.rs

Exports: SOURCE_DATE_EPOCH stands in for the clock, so output repeats

2026-10-19 00:37:55 +07:00

tests_newart.rs

…

tests_newdoc.rs

Artboards: the doc comment names the shared corner the first artboard holds

2026-10-17 17:13:02 +07:00

tests_objects_on_path.rs

Objects on Path: clipping paths and parts of blends, envelopes and repeats stay in place

2026-10-21 16:46:13 +07:00

tests_objexpand.rs

Color: freeform gradients keep CMYK inks when expanded, meshed or edited

2026-10-18 12:36:25 +07:00

tests_opacitymask.rs

Fix #2727: opacity-mask editing no longer dims the canvas

2026-10-18 23:48:57 +07:00

tests_outlineobject.rs

Use Preview Bounds: objects are measured with their geometry effects

2026-10-21 17:11:08 +07:00

tests_outlinestroke.rs

Expand: pattern fills expand into their tiles clipped by the shape

2026-10-17 15:14:42 +07:00

tests_overprint.rs

…

tests_package.rs

Package: File › Package collects and writes the package on the background thread

2026-10-22 17:20:48 +07:00

tests_paintproxy.rs

Commands: a boolean or number given as text is refused

2026-10-22 00:10:57 +07:00

tests_panelcmds.rs

Fix #2103: arrow keys with the Artboard tool move the selected artboards and their art

2026-10-22 16:06:54 +07:00

tests_paragraphs.rs

Type: sizes, scales, leading, indents and spacing out of range in a file are read in range

2026-10-18 01:21:25 +07:00

tests_params.rs

Commands: Transform Each, artboards and more refuse a boolean or number given as text

2026-10-22 06:40:27 +07:00

tests_pathops.rs

Pathfinder Unite: compound path, not group (#2178)

2026-10-22 00:01:36 +07:00

tests_pathtype.rs

Type: Change Case, Smart Punctuation and other commands that change nothing record no undo step

2026-10-12 08:45:22 +07:00

tests_pattern.rs

Add interactive Mirror Repeat axis controls

2026-10-18 19:02:44 +07:00

tests_pdffidelity.rs

…

tests_pdfmarks.rs

…

tests_pdfpresets.rs

…

tests_pdfraster.rs

#1244: smaller objects: Node 352 -> 152 bytes, NodeKind 200 -> 80, and a cheaper undo estimate

2026-10-12 11:02:32 +07:00

tests_persp_planes.rs

…

tests_persp_select.rs

Tests: the Alt-drag tests no longer fail when their documents are made in different seconds

2026-10-16 02:21:46 +07:00

tests_persp_text.rs

Background save: dropped Puppet Warp pins, ended Edit Text and font scans leave the document saved

2026-10-17 17:13:03 +07:00

tests_perspgrid.rs

Commands: a boolean or number given as text is refused

2026-10-22 00:10:57 +07:00

tests_place.rs

Place: Bounding Box measures only the art that shows

2026-10-18 12:34:29 +07:00

tests_placed_document.rs

IO.1: preserve editable export data and AI artboard options

2026-10-12 06:59:49 +07:00

tests_plugins.rs

Plug-ins: filters read and set effects and stroke styles (G17)

2026-10-22 01:25:50 +07:00

tests_prefs.rs

G12: honor Enable Touch Workspace preference

2026-10-21 23:38:03 +07:00

tests_previewbounds.rs

Use Preview Bounds: a handle drag keeps the opposite visible edge in place

2026-10-21 17:11:08 +07:00

tests_print.rs

Print: Print, Print Preview and Print Setup take a print preset by name

2026-10-17 13:49:49 +07:00

tests_printadvanced.rs

Part of #394: Appearance of Black › Printing / Exporting draws pure CMYK black as RGB black

2026-10-14 05:11:55 +07:00

tests_printpresets.rs

…

tests_printpreview.rs

Print: Print, Print Preview and Print Setup take a print preset by name

2026-10-17 13:49:49 +07:00

tests_printps.rs

Print: Print and Print Preview warn about type that doesn't fit its frame

2026-10-16 15:27:54 +07:00

tests_printtiling.rs

Commands: an index of 2^32 or more no longer wraps around on 32-bit builds

2026-10-21 23:38:03 +07:00

tests_proxyitems.rs

…

tests_puppetwarp.rs

Background save: dropped Puppet Warp pins, ended Edit Text and font scans leave the document saved

2026-10-17 17:13:03 +07:00

tests_rasterfilters.rs

G2: Effect › Artistic › Fresco raster filter

2026-10-22 01:15:09 +07:00

tests_rastersettings.rs

Merge main into feat/live-rasterize-effect

2026-10-17 04:09:12 -07:00

tests_recolor.rs

Recolor: recolor.apply takes a model option for the new colour's model (#2170)

2026-10-22 02:01:57 +07:00

tests_recovery.rs

Data Recovery: the recovery folders are owner-only on Unix

2026-10-21 23:14:27 +07:00

tests_reflecthit.rs

#1026: open filled paths are hit by their fill on every side

2026-10-11 05:30:24 +07:00

tests_registration.rs

…

tests_save.rs

View: Show Transparency Grid is saved with the document

2026-10-17 14:43:12 +07:00

tests_saveoptions.rs

…

tests_scalestrokes.rs

#1244: smaller objects: Node 352 -> 152 bytes, NodeKind 200 -> 80, and a cheaper undo estimate

2026-10-12 11:02:32 +07:00

tests_scripts.rs

Scripts: Check Script… reports what a .jsx script needs and does, without running it

2026-10-13 13:36:41 +07:00

tests_select_ids_first.rs

Selection-only commands take ids: the objects are selected first (#2130)

2026-10-16 04:44:50 +07:00

tests_shaper.rs

Isolation mode: object.isolate checks a Shaper Group's source group

2026-10-21 16:55:16 +07:00

tests_shortcutset.rs

Keyboard Shortcuts: shortcut set reading and matching stay bounded on hostile files

2026-10-14 13:49:59 +07:00

tests_slices.rs

Commands: an index of 2^32 or more no longer wraps around on 32-bit builds

2026-10-21 23:38:03 +07:00

tests_smartguides.rs

…

tests_store.rs

PDF presets: a rename that can't be written keeps the preset under its old name

2026-10-18 01:24:34 +07:00

tests_strokegeom.rs

…

tests_strokegradient.rs

Expand: pattern fills expand into their tiles clipped by the shape

2026-10-17 15:14:42 +07:00

tests_strokereach.rs

…

tests_strokeux.rs

Align Stroke inside or outside on live type (#2294)

2026-10-16 15:27:54 +07:00

tests_stylelib.rs

#1244: smaller objects: Node 352 -> 152 bytes, NodeKind 200 -> 80, and a cheaper undo estimate

2026-10-12 11:02:32 +07:00

tests_stylepanel.rs

Commands: an index of 2^32 or more no longer wraps around on 32-bit builds

2026-10-21 23:38:03 +07:00

tests_styles.rs

Commands: an index of 2^32 or more no longer wraps around on 32-bit builds

2026-10-21 23:38:03 +07:00

tests_swatchcmds.rs

Commands: Transform Each, artboards and more refuse a boolean or number given as text

2026-10-22 06:40:27 +07:00

tests_swatches.rs

Global swatch edits reach opacity-mask art (#1735)

2026-10-14 08:01:50 +07:00

tests_swatchlib.rs

Fix #3395: color book library tabs use file name

2026-10-22 11:17:31 +07:00

tests_symbolbounds.rs

Artboards: Rearrange and Select All on Active Artboard measure a symbol instance by its art

2026-10-17 16:38:43 +07:00

tests_targeting.rs

#1244: smaller objects: Node 352 -> 152 bytes, NodeKind 200 -> 80, and a cheaper undo estimate

2026-10-12 11:02:32 +07:00

tests_textcombos.rs

…

tests_textedit.rs

Commands: Transform Each, artboards and more refuse a boolean or number given as text

2026-10-22 06:40:27 +07:00

tests_textimport.rs

Place: Word's low, medium and high kashida justification sets Insert Kashidas

2026-10-21 23:32:26 +07:00

tests_tileedge.rs

…

tests_tints.rs

…

tests_toolsettings.rs

…

tests_transparencygrid.rs

…

tests_typearea.rs

Transform: Transform Again repeats the options of the transform it repeats

2026-10-12 08:16:07 +07:00

tests_typescale.rs

G4: Scale Text Attributes bakes transform scale into type sizes

2026-10-21 23:38:03 +07:00

tests_units.rs

…

tests_variables.rs

Variables: Load Variable Library… reads a variable library's text variables and data sets

2026-10-22 00:12:39 +07:00

tests_webexport.rs

Save for Web: saving and Preview in Browser warn when an image couldn't be decoded

2026-10-18 01:32:01 +07:00

tests_widthpoints.rs

G1: Fix intermediate overflow in adjoining width adjustments

2026-10-16 02:56:35 +07:00

tests_widthprofiles.rs

…

tests_widthtool.rs

…

tests_xform.rs

Artboards: Width, Height, Preset and Orientation apply to every selected artboard (#2565)

2026-10-20 07:23:49 +07:00

tests.rs

Commands: path.create with path data refuses closed given as text, and the grids refuse a count

2026-10-22 08:24:09 +07:00

tooling.rs

M3: preserve highlighted Eyedropper ranges and reject incompatible transparency

2026-10-22 02:58:48 +07:00

units.rs

…