becauseno7 4319df2e59 PDF import: the encryption pre-scan reads a bounded window after each trailer (#2142) ...

The pre-scan lexed one object after every `trailer` marker over the rest of
the file, so an unterminated string or dictionary after each of many markers
made opening a crafted PDF quadratic. Each lex now gets a 4 KiB window; when
it runs out, the file is refused if `/Encrypt` appears past the window (one
search per file), so long trailers can't hide the key.

2026-10-30 14:46:34 +06:00

..

automation

Merge main into #2520; fold the PR's DefaultOutput into main's Lookup::QueueDefault (#2636) for renderQueue.add, render.preRender and file.createProxy, keep #2521's RUNS_SCRIPTS refusal with Vec<Lookup>, keep both tests, blender test expects no lookups, docs/mcp.md names all three

2026-10-30 10:24:43 +07:00

av1enc

Merge remote-tracking branch 'upstream/main' into q2400-merge

2026-10-29 20:32:16 +01:00

color

Color: rgb_to_hsl keeps over-range saturation so 32 bpc colours round-trip

2026-10-29 10:21:52 +07:00

effects

Tests: Simple Choker keeps growing the matte down to -100 (#2102)

2026-10-30 10:23:11 +07:00

engine

Merge pull request #2668 from nanox333/codex/gradient-stroke-width

2026-10-30 14:51:50 +07:00

export

Merge remote-tracking branch 'origin/main' into HEAD

2026-10-30 09:01:05 +07:00

expr

Merge remote-tracking branch 'origin/main' into HEAD

2026-10-30 07:11:39 +07:00

geom

Merge pull request #1947 from Silvertree2010/fix/h867-mat3-square-to-quad-returns-a-na

2026-10-30 00:14:45 +07:00

gpu

Merge pull request #2653 from storytold/fix/2618-adjustment-blend-modes

2026-10-30 12:10:16 +07:00

hevcenc

export: tag BT.709 limited-range nclx; the ffmpeg oracles pick decoders by name and skip unbuildable fixtures

2026-10-30 01:30:53 +08:00

host

Merge remote-tracking branch 'origin/main' into HEAD

2026-10-30 09:02:01 +07:00

interchange

Merge main into #1601; no conflicts

2026-10-30 09:23:46 +07:00

keyframe

Keyframes: offer Unmute Keyframes in the Animation menu

2026-10-29 23:51:04 +01:00

lottie

Shapes: export per-corner rc.r as a Lottie property

2026-10-30 01:24:59 +01:00

media

Merge main into #1739; keep both footage re-exports (Cineon + VIDEO_EXTENSIONS) and main's gaps.md localization row with the PR's AVI row

2026-10-30 07:44:20 +07:00

model

Merge pull request #1504 from midasmatterhorn/fix/issue-1274-obj-sibling-textures

2026-10-30 01:22:54 +07:00

opusenc

Merge pull request #2402 from vangel76/opusenc-pvq-search

2026-10-30 01:17:19 +07:00

path

Shapes: per-corner roundness for Rectangle Path (#1896)

2026-10-30 01:24:59 +01:00

pdf

PDF import: the encryption pre-scan reads a bounded window after each trailer (#2142)

2026-10-30 14:46:34 +06:00

plugin

…

project

Merge pull request #2641 from storytold/fix/2019-sequence-folder-name

2026-10-30 10:19:15 +07:00

psd

Keep the PR building with main: Layers stays off psd documents; preview merge and fmt

2026-10-30 07:11:40 +07:00

raster

Merge pull request #2534 from klosixgaming-arch/fix/2022-render-banding

2026-10-30 05:09:48 +07:00

render

Merge remote-tracking branch 'origin/main' into HEAD

2026-10-30 13:31:39 +07:00

script

Merge pull request #2629 from storytold/fix/2585-scriptui-dock-size

2026-10-30 08:12:01 +07:00

segment

Refactor segment for strict Clippy checks

2026-10-28 06:09:21 +00:00

svg

Merge main into #2181; keep both sides of crates/svg/src/pathdata.rs

2026-10-30 00:15:40 +07:00

text

Make font substitute test work with installed originals

2026-10-29 22:22:07 -07:00

time

Merge main into #2467; keep both sides of crates/time/src/lib.rs

2026-10-30 00:15:14 +07:00

track

Merge upstream/main into camtrack-matrix-free-schur

2026-10-29 20:32:17 +01:00

ui-egui

Merge pull request #2669 from storytold/fix/ui-egui-tests-one-binary

2026-10-30 14:36:59 +07:00

vp9enc

Merge pull request #2449 from vangel76/vp9enc-tables-carry-dimensions

2026-10-30 01:13:58 +07:00