Struct DecodeLimits 

#[non_exhaustive]
pub struct DecodeLimits {
    pub max_points: u64,
    pub max_faces: u64,
    pub max_decoded_bytes: u64,
}

Ceilings on one decode, applied to what the stream reconstructs.

Every field is a hard ceiling: exceeding one fails the decode with ErrorKind::LimitExceeded, which a caller can tell apart from ErrorKind::AllocationExceedsInput – its own policy refusing a large file, rather than the decoder refusing a malformed one.

The counts are the decoded ones, not the ones a source file was authored with. Draco splits a point wherever an attribute seam runs through it, and the growth is real: measured across ten assets it runs from zero to 7.7%, and one exporter’s 65,532-point primitive decodes to 76,742. A ceiling derived from what an exporter writes would refuse files that follow its own convention.

Install with DecoderBuffer::with_limits.

use draco_core::{DecodeLimits, DecoderBuffer};

let stream = [0u8; 0];
let buffer = DecoderBuffer::new(&stream)
    .with_limits(DecodeLimits::default().with_max_points(1_000_000));

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

max_points: u64

Largest accepted decoded point count.

max_faces: u64

Largest accepted decoded face count.

max_decoded_bytes: u64

Largest accepted total size of decoded attribute values, in bytes.

This is the one that bounds memory. The other two are proxies whose relationship to bytes the attribute set moves around: of two measured assets, the one with a third fewer points held twice the bytes per primitive, because it carried tangents and five texture-coordinate sets against a position and a normal.

Implementations

impl DecodeLimits

pub fn permissive() -> Self

No ceiling at all, which is what this crate did before the type existed.

For a caller that decodes trusted local input and would rather have a scan loaded whole than a refusal.

pub fn fuzzing() -> Self

Tight ceilings for fuzzing, so a reported allocation failure is a real bug rather than the fuzzer feeding a legitimately huge count.

impl DecodeLimits

pub fn with_max_points(self, value: u64) -> Self

Sets Self::max_points.

pub fn with_max_faces(self, value: u64) -> Self

Sets Self::max_faces.

pub fn with_max_decoded_bytes(self, value: u64) -> Self

Sets Self::max_decoded_bytes.

Trait Implementations

impl Clone for DecodeLimits

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for DecodeLimits

impl Debug for DecodeLimits

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for DecodeLimits

fn default() -> Self

Returns the “default value” for a type.

impl Eq for DecodeLimits

impl PartialEq for DecodeLimits

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for DecodeLimits