zpdf-core 0.6.0

Core types for zpdf: PDF object model, geometry, errors
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

/// Security limits for PDF parsing. PDF is an untrusted input format.
#[derive(Debug, Clone)]
pub struct ParseLimits {
    pub max_object_depth: u32,
    pub max_stream_bytes: u64,
    pub max_image_pixels: u64,
    pub max_page_operators: u64,
    pub max_string_length: u32,
    /// Max number of objects a tail-scan recovery pass will index before
    /// giving up (guards against pathological/adversarial inputs).
    pub max_objects: u32,
}

impl Default for ParseLimits {
    fn default() -> Self {
        Self {
            max_object_depth: 100,
            max_stream_bytes: 256 * 1024 * 1024,
            max_image_pixels: 100_000_000,
            max_page_operators: 1_000_000,
            // ISO 32000 imposes no string length limit (64 KiB is only the
            // PDF/A-1 / legacy-Acrobat bound), so real files exceed it. This
            // is purely an allocation guard against adversarial input.
            max_string_length: 16 * 1024 * 1024,
            max_objects: 5_000_000,
        }
    }
}