Enum LimitError 

pub enum LimitError {
    FileTooLarge {
        actual_bytes: u64,
        limit_bytes: u64,
    },
    StreamTooLarge {
        actual_bytes: u64,
        limit_bytes: u64,
    },
    ImageTooLarge {
        width: u64,
        height: u64,
        pixels: u64,
        limit_pixels: u64,
    },
    ObjectDepthExceeded {
        depth: u32,
        limit: u32,
    },
    TooManyOperators {
        count: u64,
        limit: u64,
    },
    XfaNestingTooDeep {
        depth: u32,
        limit: u32,
    },
    FormCalcRecursionTooDeep {
        depth: u32,
        limit: u32,
    },
}

Error returned when a configured resource limit is exceeded.

A LimitError is a hard stop on the current operation — the caller should either raise the relevant cap on the ProcessingLimits used to construct the engine, or refuse the input. All variants carry both the observed value and the limit so callers can produce useful error messages without re-running detection.

Variants

FileTooLarge

PDF file size exceeded ProcessingLimits::max_file_bytes. Defends against trivially-DoS-ing the parser with an oversized input.

Fields

actual_bytes: u64

Observed file size in bytes.

limit_bytes: u64

Configured maximum file size in bytes.

StreamTooLarge

A decompressed stream exceeded ProcessingLimits::max_stream_bytes. Defends against “decompression bomb” inputs (Flate, LZW, ASCII85) that expand far beyond their compressed footprint.

Fields

actual_bytes: u64

Observed decompressed stream size in bytes.

limit_bytes: u64

Configured maximum stream size in bytes.

ImageTooLarge

An image XObject exceeded ProcessingLimits::max_image_pixels. pixels = width * height regardless of color depth. Guards the memory used by rasterization and color-space conversion.

Fields

width: u64

Observed image width in pixels.

height: u64

Observed image height in pixels.

pixels: u64

Observed total pixel count (width * height).

limit_pixels: u64

Configured maximum pixel count.

ObjectDepthExceeded

Indirect-object reference chain exceeded ProcessingLimits::max_object_depth. Defends against cyclic or pathologically nested object graphs that would otherwise blow the parser stack.

Fields

depth: u32

Observed reference-chain depth.

limit: u32

Configured maximum reference-chain depth.

TooManyOperators

Content-stream operator count exceeded ProcessingLimits::max_operator_count. Caps per-page rendering work so a billion no-op operators can’t pin a CPU.

Fields

count: u64

Observed operator count.

limit: u64

Configured maximum operator count.

XfaNestingTooDeep

XFA template subform nesting exceeded ProcessingLimits::max_xfa_nesting_depth. Defends the XFA layout engine against pathologically nested templates.

Fields

depth: u32

Observed XFA subform nesting depth.

limit: u32

Configured maximum nesting depth.

FormCalcRecursionTooDeep

FormCalc expression recursion exceeded ProcessingLimits::max_formcalc_depth. Stops infinite or deeply mutually-recursive expressions from blowing the FormCalc interpreter stack.

Fields

depth: u32

Observed recursion depth.

limit: u32

Configured maximum recursion depth.

Trait Implementations

impl Clone for LimitError

fn clone(&self) -> LimitError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LimitError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for LimitError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for LimitError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl PartialEq for LimitError

fn eq(&self, other: &LimitError) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for LimitError

impl StructuralPartialEq for LimitError