Martin BallandClaude Opus 5.5 b246ea166a #3692: COLR gradient stops and clip paths count against a per-glyph budget ...

Finding 61: Recorder copied every gradient's stop list (and every clip
glyph's outline) per op, capped only by op count, so a compact COLR graph
reusing one long stop list could expand to billions of stops. Stops and
path elements now share MAX_PAYLOAD (65,536) per glyph, charged before
copying; past it the glyph falls back to its outline and no further clip
outlines are built. The render cache charges each glyph's real ops,
stops and path bytes (ops_bytes) instead of a flat 64 bytes per op.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-25 21:02:01 -04:00

..

src

#3692: COLR gradient stops and clip paths count against a per-glyph budget

2026-10-25 21:02:01 -04:00

Cargo.toml

Pictures: one decoder checks the header against the budget, progressive JPEG coefficients included (#3644)

2026-10-24 18:01:45 -01:00