daniel543x/craft-libs
1
0 Fork 0
mirror of https://github.com/storytold/craft-libs.git synced 2026-11-08 19:42:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,126 Commits 49 Branches 0 Tags
31e54f7e4173076bd55eda35a75d2322bb016830
Commit Graph
1126 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Dylan M. Taylor 31e54f7e41 Merge pull request #531 from storytold/fix/sec-xref-entry-cap 
hayro-syntax: cap a document's xref map at the PDF object limit
 2026-11-02 22:40:16 -05:00
Dylan M. Taylor 80bbc2939c Merge pull request #530 from storytold/fix/sec-jbig2-decode-limit 
hayro-syntax: hold a JBIG2 page to the stream's decode limit
 2026-11-02 22:39:43 -05:00
Dylan M. Taylor c0b58fdb45 Merge pull request #529 from storytold/fix/sec-plate-test-tempdir 
plate-test: separate plates in a private random temporary directory
 2026-11-02 22:29:15 -05:00
Dylan M. Taylor 299112d789 Merge pull request #528 from storytold/fix/sec-fonts-build-paths 
fonts-build: keep manifest font and licence paths inside the checkout
 2026-11-02 22:29:12 -05:00
Dylan M. Taylor 0329fe14de Merge pull request #527 from storytold/fix/sec-fonts-build-cmap 
fonts-build: read each shared cmap subtable once
 2026-11-02 22:29:09 -05:00
Dylan M. Taylor 7eac928440 Merge pull request #468 from carkrueger/fix/cascade-on-real-monitors 
window: cascade new windows on the real monitor
 2026-11-02 22:26:48 -05:00
Dylan M. Taylor 9a20fdbe1d Merge pull request #267 from fluorine/fix/fonts-build-ui-paths 
Fix native path assertion in font embedding test
 2026-11-02 22:24:39 -05:00
Dylan M. Taylor 90f9f9aa18 Merge pull request #476 from dotCooCoo/fix/keymap-iso-key-shift-symbol 
keymap: test that Shift on the ISO key typing a symbol is dropped
 2026-11-02 22:24:35 -05:00
Dylan M. Taylor 2bd8f60e15 Merge pull request #367 from lehni/fix/native-bar-title 
docking: a native floating window's bar shows no title, as its tab names the panel
 2026-11-02 22:16:24 -05:00
Dylan M. Taylor 9d4f20aa03 Merge pull request #522 from vangel76/perf/bitreader-expgolomb-517 
bitstream: decode short Exp-Golomb codes with one peek, write ue(v) in one call (#517)
 2026-11-02 22:07:16 -05:00
Dylan M. Taylor 1508ae6d63 Merge pull request #521 from vangel76/perf/rbsp-unescape-518 
bitstream: copy runs in unescape_rbsp instead of pushing byte by byte (#518)
 2026-11-02 22:06:14 -05:00
Dylan M. Taylor 8e717b26da Merge pull request #519 from vangel76/perf/bitreader-peek-516 
bitstream: one 8-byte load in BitReader::peek, bit reads 2.5x faster (#516)
 2026-11-02 22:05:14 -05:00
Dylan M. Taylor 0535bc87f1 Merge pull request #146 from midasmatterhorn/fix/r4-cms-cube-domain 
cms: write_cube keeps a non-default input domain
 2026-11-02 22:01:55 -05:00
Dylan M. Taylor f52b9dc547 Merge pull request #475 from dotCooCoo/fix/hayro-syntax-debug-closing-brace 
hayro-syntax: tests check that valid entries survive an unreadable value, and Debug prints the closing brace
 2026-11-02 21:57:54 -05:00
Dylan M. Taylor 40bb05042f Merge pull request #474 from dotCooCoo/fix/krilla-gray-black 
krilla: a gray stop in a CMYK gradient becomes its exact black (patch 17)
 2026-11-02 21:57:50 -05:00
Dylan M. Taylor 9be9a63782 Merge pull request #426 from mockydevs/fix/path-as-rect-open-polyline 
pdf reader: a five-point open polyline is not a rectangle
 2026-11-02 21:53:06 -05:00
Dylan M. Taylor 69e3708e5c Merge pull request #451 from MarekSpodBiedry/issue-328 
hayro-interpret: pad a missing low byte in 16-bit image data instead of panicking (#328)
 2026-11-02 21:53:03 -05:00
Dylan M. Taylor 89e3bba144 Merge pull request #180 from bobbyjnichols/fix/atomic-smb-permissions 
atomic: skip redundant chmod for matching replacement modes
 2026-11-02 21:41:05 -05:00
Dylan M. Taylor c64d9b28f4 Merge pull request #145 from midasmatterhorn/fix/r4-settings-blank-file 
settings: a blanked config.toml is no longer adopted over the loaded document
 2026-11-02 21:41:02 -05:00
Dylan M. Taylor 0c332d87de Merge pull request #460 from marshiyar/fix/update-package-manager-copies 
update: a package manager's copy and another app's bundle do not self-update on macOS and Windows
 2026-11-02 21:39:55 -05:00
Dylan M. Taylor 0035af1539 Merge pull request #392 from Tomcatt/fix/standalone-update-whole-tree 
fix(update): a standalone self-update replaces the whole tarball install
 2026-11-02 21:39:39 -05:00
Dylan M. Taylor e21dfdba5d Merge pull request #481 from VoiceLessQ/fix/flatpak-bundle-reinstall 
fix(update): handle a bundle Flatpak before 1.16.2 won't reinstall
 2026-11-02 21:34:54 -05:00
Dylan M. Taylor 40751df9ac Merge pull request #465 from Jeremy8776/fix/msi-context-native 
craft-update: read an MSI's install context without starting PowerShell
 2026-11-02 21:34:50 -05:00
Dylan M. Taylor b49ce8590f Merge pull request #452 from ZIDAN44/fix/391-safe-release-link 
update: the prompt opens only a safe release link; document token logging (#391)
 2026-11-02 21:33:30 -05:00
Dylan M. Taylor e4108a3172 Merge pull request #513 from ljkx/update/sums-duplicate-names 
update: one asset per name in SHA256SUMS.txt (#478)
 2026-11-02 21:30:55 -05:00
Dylan M. Taylor 92a8f0df9f Merge pull request #514 from ljkx/update/https-only-agents 
update: keep the remote HTTP agents and their redirects on HTTPS (#477)
 2026-11-02 21:30:51 -05:00
Dylan M. Taylor c953d6dc65 plate-test: assert the work directory stays owner-writable 2026-11-02 21:27:06 -05:00
Dylan M. Taylor 52824cf779 hayro-syntax: cap a document's xref map at the PDF object limit 
An xref-stream entry can be a single decoded byte, so one xref stream at the
256 MiB decode limit could expand into hundreds of millions of map entries
(several gigabytes) while the document was opened. Every insert into the xref
map now goes through insert_entry, which refuses a new object past 8,388,607
entries (the PDF 32000-1 Annex C limit on indirect objects). This covers
xref tables, xref streams, merges of Prev/XRefStm sections and the repair
scan. Replacing an object already in the map is still allowed.
 2026-11-02 20:50:22 -05:00
Dylan M. Taylor 5b4f71f988 hayro-syntax: hold a JBIG2 page to the stream's decode limit 
The JBIG2 filter ignored the limit every other filter gets, so a stream
decoded with decoded_within (an output intent's 16 MiB ICC profile in
craft-prepress) could still build a page up to 2^28 one-byte pixels. The
page header's size is now checked against the limit before any output is
allocated: the returned bytes when the stream has no image dimensions,
the 1-bit packed size for an image of known size.
 2026-11-02 20:44:12 -05:00
Dylan M. Taylor 894340e098 fonts-build: check licence and embedded_elsewhere symlinks against the checkout, refuse symlinks in the served directory 2026-11-02 20:40:37 -05:00
Dylan M. Taylor b96da36713 plate-test: separate plates in a private random temporary directory 
The Ghostscript work directory had a predictable name under the shared
temporary directory, and a failed removal of an existing one was ignored.
Another local user could create it first with an in.pdf symlink, and
writing the input would follow it. The directory is now created with
tempfile (random name, owner-only permissions, fails if it exists), and
in.pdf is created with create_new.
 2026-11-02 20:39:35 -05:00
Dylan M. Taylor 47c9f62530 Merge pull request #497 from benandez/p7-compound 
craft-proof: flag-based compound words (COMPOUNDFLAG/BEGIN/PERMITFLAG…)
 2026-11-02 20:38:11 -05:00
Dylan M. Taylor 9d2d4f1cd9 fonts-build: test that duplicate cmap records don't use up the subtable cap 2026-11-02 20:31:13 -05:00
Dylan M. Taylor c2f94a6aa2 fonts-build: read each shared cmap subtable once 
A cmap can list 65535 encoding records that all name the same subtable,
and Cmap::ranges expanded that subtable's spans once per record before
merging them. Records naming a subtable already read are now skipped,
and at most 16 distinct Unicode subtables are read from one face.
 2026-11-02 20:11:11 -05:00
Dylan M. Taylor 62df3ef5cb fonts-build: keep manifest font and licence paths inside the checkout 
A manifest file or licence_file that is absolute, climbs out with .., or
resolves through a symlink to a file outside the checkout is now an
Error::OutsideCheckout instead of being embedded with include_bytes! or
copied (and written) outside the directory given to Embed::serve.
 2026-11-02 19:58:30 -05:00
Martin BallandClaude Opus 5.5 22144c823a proof: licence warnings report the actual error; machine-independent English test; SuggestSteps drop note 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-03 00:47:39 +00:00
Martin BallandClaude Opus 5.5 3012d73c82 proof: AffixDict::build reads the stems' flags in its own function 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-03 00:47:28 +00:00
Martin BallandClaude Opus 5.5 f87f08a87a Merge origin/main into fix/497-coderabbit 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-03 00:46:59 +00:00
Dylan M. Taylor b047c2f7a6 Merge pull request #496 from benandez/fu-proof-p3 
craft-proof: review follow-ups (P3s from the proofing move)
 2026-11-02 19:32:53 -05:00
ljkx e6189423a0 update: test Http::new's HTTPS-only setting, and keep refused links out of messages 
An integration test builds the library without cfg(test), so it checks the release configuration: the remote agents refuse plain HTTP (an upper-case scheme too) without connecting, loopback links still work, and with local-mirror the remote agents take plain HTTP.

A refused hop's message names only the host. ureq's message holds the whole link, and a redirect to the file host carries a signed query. host() also drops a query and any user:password@.
 2026-11-03 01:13:37 +01:00
Martin BallandClaude Opus 5.5 14cf444fcf craft-proof scowl — load_error(en-AU) also reports a failed en-GB list, which en-AU reads too (#496 review) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 23:56:09 +00:00
Martin BallandClaude Opus 5.5 3aca2642c5 craft-proof tr — the double-space rule uses space_runs; the all-languages test adds Tr, EnAu, EnCa and pt-PT (#496 review) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 23:56:09 +00:00
Martin BallandClaude Opus 5.5 aa3730352f craft-proof — en-AU comment and docs: it also takes en-GB's words (enquiry is only in the en-GB list), suggestions from en-AU (#496 review) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 23:56:09 +00:00
Martin BallandClaude Opus 5.5 3e37fbcd7e craft-proof it, pt — an object placeholder between the mark and a real closing quote keeps the narration exemption («Vai?\u{1}» disse lui.) (#496 review) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 23:56:09 +00:00
Martin BallandClaude Opus 5.5 4c8cb404ab craft-proof it — a space after the dialogue dash no longer hides the capital mark (Finì. — domani partiamo.) (#496 review) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 23:48:04 +00:00
Martin BallandClaude Opus 5.5 f3d411638d craft-proof it — the dialogue-dash exception applies after ? and ! only, so Finì. —domani partiamo. gets its capital mark again (#496 review) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 23:47:08 +00:00
Martin BallandClaude Opus 5.5 a8b3bb74c8 craft-proof it, pt — the object placeholder is not a closing quote, so Chi era?\u{1} era Marco. still gets its capital mark (#496 review) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 23:23:15 +00:00
Martin BallandClaude Opus 5.5 cb82e91428 craft-proof — a run of spaces is one double-space issue over the whole run in every language, through one shared space_runs helper (#496 review) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 23:23:15 +00:00
Martin BallandClaude Opus 5.5 7b64b78cb0 craft-proof english — Australian English also takes a word in SCOWL's en-GB list, and without SCOWL every en_AU source is read before any en_GB one (#496 review) 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-02 23:23:09 +00:00
ljkx 240a005494 update: look SHA256SUMS.txt names up in a map, not by scanning 
A 4 MiB list holds some 60,000 names, and searching the earlier entries
for each one made parsing quadratic: about 8 s for a full-size list in
a release build. A map from name to position and a set of conflicting
names make it linear again, with the same entries in the same order.
 2026-11-02 23:56:02 +01:00