Martin BallandClaude Opus 5.5 f0561b7fb0 storytold/wordcraft#3661: bounded dictionary reads — hyphenation inflate limit, capped Hunspell and Turkish reads ...

Audit finding 4, and the rest of storytold/wordcraft#3661.

- dict.rs: `Dictionary::from_bytes` inflates with `decompress_to_vec_with_limit` (64 MiB; the
  bundled en-US one is ~1 MB) and caps the words it keeps (bytes and count): front coding lets a
  2-byte line spell out a 255-byte word, so the inflated size alone doesn't bound storage.
- hunspell.rs: one `read_capped` reader — regular files only, size checked on the open handle and
  the read itself bounded by `take(MAX_FILE + 1)`, so no TOCTOU between metadata and read and no
  endless read from a FIFO or device.
- tr: the Turkish loader reads through `read_capped` and decodes with `hunspell::decode` (it
  read both files whole, with no cap at all).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-26 00:17:25 +00:00

crates/proof

storytold/wordcraft#3661: bounded dictionary reads — hyphenation inflate limit, capped Hunspell and Turkish reads

2026-10-26 00:17:25 +00:00

S

Description

No description provided

109 MiB

0 Stars 1 Watchers 0 Forks

Languages

Rust 98.5%

Max 1.3%

Python 0.2%