pdfcraft/vendor/lopdf/src
Ikki Nishihara 559859ca61
lopdf: bound object lookups through compressed containers and object-stream members (#771)
A compressed object's container was resolved with a fresh cycle set and
without checking that it is an ordinary object, and indirect /Length
chains had no depth limit, so self-containing or chained lookups
overflowed the stack. Pass the caller's set on, require an in-file
container and cap the chain at 16 lookups. Object-stream members were
each parsed to the end of the decoded stream, so repeated or nested
offsets kept many copies of one large object: parse each member within
its own extent and skip repeated offsets.

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-10-10 15:51:25 -04:00
..
common_data_structures Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
encodings Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
encryption Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
filters M2: bound lopdf predictor scratch to available samples (#470) 2026-10-09 09:21:21 -04:00
parser Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
bookmarks.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
cmap_section.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
content.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
creator.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
datetime.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
destinations.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
document.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
encryption.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
error.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
font.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
incremental_document.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
lib.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
load_options.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
object.rs M2: bound lopdf predictor scratch to available samples (#470) 2026-10-09 09:21:21 -04:00
object_stream.rs lopdf: bound object lookups through compressed containers and object-stream members (#771) 2026-10-10 15:51:25 -04:00
outlines.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
parser_aux.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
processor.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
reader.rs lopdf: bound object lookups through compressed containers and object-stream members (#771) 2026-10-10 15:51:25 -04:00
save_options.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
toc.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
writer.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
xobject.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00
xref.rs Never crash: bound the allocations behind the nightly fuzz runner's out-of-memory deaths 2026-10-04 17:59:25 -04:00