fastimage 2.4.2 → 2.4.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 67d8bb4b8d87e073cb5251387d5f73846849126eac20202cf964d5159afab120
-  data.tar.gz: 9e43de443fcaef8c4a99e76568a52adb74e06f6e59f361c0974bbebc56de6bcc
+  metadata.gz: ccdbb1bae657d9c0e935422f1194986c5b78bcc23cdf3fcba4bd741f764a3d28
+  data.tar.gz: 88e8d78e8958a33d36fa887a01cb55083ca424919fceaf252760e81148022c44
 SHA512:
-  metadata.gz: c219a4b5df6301e3ce50e7731dd9cf0bca79a591635e31515f7535a5d9fc0386d69c0fa47a26bd25ea9dc0ff5ed960b66da3d99f28cd89acacf5640b65f2aadb
-  data.tar.gz: ba453f683cf2e68c9d7c9a4b741b0e77f2c6bd8f84fdb10685aba031c6114e008c94d3dbb4c08b883f72f5447fa9305cce558e4e12912f4d97eb2318b8438155
+  metadata.gz: 839a15a2876f6855bbe4a7efdce3d1243dcc591c6962623f809a98582e753e085ce0bb409be726ede08f0cdfd6f438add649fdaddd20ac509dcdd6dd60b992a4
+  data.tar.gz: 0efd8b69909220e73f8f5683c8275af8040f1e61f5a2687cf097face9fa5ce14d6d5a3d46c10cceed96b2200cc98ecc4f363f5ca2a15a5f1cb16fa3344b9bd7c

data/lib/fastimage/fastimage_parsing/fiber_stream.rb

@@ -13,8 +13,11 @@ module FastImageParsing
       @str = ''
     end
   
-    # Peeking beyond the end of the input will raise
+    # Peeking beyond the end of the input will raise. A negative length would
+    # move the cursor backwards, so treat it as unparseable data.
     def peek(n)
+      raise FastImage::CannotParseImage if n < 0
+
       while @strpos + n > @str.size
         unused_str = @str[@strpos..-1]
   
@@ -38,6 +41,8 @@ module FastImageParsing
     end
   
     def skip(n)
+      raise FastImage::CannotParseImage if n < 0
+
       discarded = 0
       fetched = @str[@strpos..-1].size
       while n > fetched

data/lib/fastimage/fastimage_parsing/jxl.rb

@@ -6,6 +6,7 @@ module FastImageParsing
         [jxlc.width, jxlc.height]
       else
         bmff = IsoBmff.new(@stream)
+        return nil unless bmff.width && bmff.height
         [bmff.width, bmff.height]
       end
     end

data/lib/fastimage/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 class FastImage
-  VERSION = '2.4.2'
+  VERSION = '2.4.3'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: fastimage
 version: !ruby/object:Gem::Version
-  version: 2.4.2
+  version: 2.4.3
 platform: ruby
 authors:
 - Stephen Sykes