null 00000111 0b935da882 HEIF: move the heic-rs pin from 0.1.1 to 0.1.4 (#3637) ...

heic-rs 0.1.2 to 0.1.4 fix six panics on malformed files, found by fuzzing:
four in release builds (a uuid box too small for its extended type, a
block starting right of the picture, a conformance window larger than the
picture, and a reference row below the picture) and two with overflow
checks on (a PCM bit depth above the sample bit depth, a slice QP out of
range). The API, MSRV and output are unchanged.

Both pins move together: crates/heif and the codecs fuzz target, which
calls heic-rs directly. guarded() stays as the backstop it was meant to be.

2026-10-12 10:22:11 -04:00

..

fuzz_targets

Animated GIF: every frame loads into video layers (#572) (#2999)

2026-10-12 01:26:37 -04:00

.gitignore

one-shot

2026-09-30 05:02:08 -04:00

Cargo.toml

HEIF: move the heic-rs pin from 0.1.1 to 0.1.4 (#3637)

2026-10-12 10:22:11 -04:00