Struct RatioGuard 

pub struct RatioGuard { /* private fields */ }

Refuses a decode whose output outgrows its input implausibly.

Deliberately not a Read wrapper: Read::read can only return std::io::Error, so a reader-based guard would box a typed error inside an io error and force the caller to downcast it back. The copy loop calls Self::record instead, and Error::ResourceLimit reaches exit_code() as 6 without that round trip.

Implementations

impl RatioGuard

pub fn new(input: Arc<AtomicU64>, max_ratio: u64) -> Self

Creates a new guard watching input tally from input and limiting output to max_ratio.

pub fn record(&mut self, n: usize) -> Result<()>

Records n bytes of output, failing if the expansion is implausible.

pub fn produced(&self) -> u64

Total output recorded so far.