Struct ParseLimits 

#[non_exhaustive]
pub struct ParseLimits {
    pub max_depth: u32,
    pub max_items: u32,
    pub max_expanded_bytes: u64,
}

Ceilings a handler applies while parsing.

Separate from crate::io::Limits, which bounds how much is read. These bound what a parser will do with what it read — the difference between refusing a 4 GB file and refusing a 4 KB file that describes four billion objects.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

max_depth: u32

Maximum nesting depth.

Stack overflow aborts the process; it is not a catchable panic, so it cannot be handled after the fact and must be prevented by construction (docs/ARCHITECTURE.md §5.1).

max_items: u32

Maximum number of structural items — objects, segments, chunks — in one file.

max_expanded_bytes: u64

Maximum bytes a single compressed structure may expand to.

Load-bearing as of the OOXML handler. It was reserved through Phase 1, because no handler decompressed anything: PNG’s compressed text chunks are removed without being inflated (ADR-0022), and the PDF handler declines to inflate a filtered metadata stream for the same reason. The ZIP container layer is the first code here to inflate, and it spends this ceiling as an allowance shared across a whole archive — so that a hundred entries each individually within it cannot collectively exceed it, which is the shape of every archive bomb that gets past a naive limit (ADR-0028, ADR-0029).

The ceiling is enforced as output is produced, never checked afterwards. A limit tested after decompressing is not a limit — the memory is already committed by the time it fails.

Trait Implementations

impl Clone for ParseLimits

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ParseLimits

impl Debug for ParseLimits

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ParseLimits

fn default() -> Self

Returns the “default value” for a type.

impl Eq for ParseLimits

impl PartialEq for ParseLimits

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ParseLimits