Dylan M. Taylor ecdd1e658c fix(audit): read content one operator at a time and charge hidden text and findings (#5875) ...

The faux-redaction audit held every operator of a page's content and of each
form XObject in a vector before walking it, so a stream of millions of short
operators (compressed to a few kilobytes) was materialised whole within the
page's decode budget. Each Do and gs also copied the whole XObject or ExtGState
table to pick one entry, and each annotation listed in /Annots was deep-copied
before its subtype was read.

The walk now reads operators one at a time through pdfcraft_content::ops,
borrows resource tables and annotation dictionaries through the resolved Arc,
charges a hidden line's text bytes (padding included) against the comparison
bound once per cover, and charges each finding's record against the output
bound, so a shared annotation list on many pages or withheld text cannot grow
the finding list for free.

2026-11-03 10:30:12 -05:00

..

cover.rs

fix(audit): read content one operator at a time and charge hidden text and findings (#5875)

2026-11-03 10:30:12 -05:00

lib.rs

fix(audit): read content one operator at a time and charge hidden text and findings (#5875)

2026-11-03 10:30:12 -05:00

tests.rs

fix(audit): read content one operator at a time and charge hidden text and findings (#5875)

2026-11-03 10:30:12 -05:00