tessel 0.2.0 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fcc9cfc07acd3c42b52031c1b3bfe996985fdd8c7d65dd26695c3f17160f48c7
-  data.tar.gz: 2b3ace72f2d8d8e6dea5693ee21fa22ff6d69d5751442c7aea0a4e9a4a917f16
+  metadata.gz: 57081a7b90e42e245d8ef8122d836932f1064a7d3a77b6215572e686c2df4bb0
+  data.tar.gz: 46d5bfddf74bab962b5a6214f2c9d2ccc97ccc5c8343de81fa319c8f652f107e
 SHA512:
-  metadata.gz: c200a0eac8eeb61aa8001896113b166eb6b7452d67e7e037cb80e115c02024067640d6cdb7cd1f700f656223f4bc4c3c5d18bcec77e52b57f4fc7a834977bce7
-  data.tar.gz: 80798691e8c58e53314305dd9c7e4be06b889dbcf6899ff04d5f83b8297edcc98edf56bdacbcdbf53603e217215feab4b327bd2543ce0388ed4592f4a4d93960
+  metadata.gz: 8d8ebb312c5b64c97ecf15633adabf33ad64d4bddd225541002e6a4194cf2bc0da786c6b668c3ace818e493eb7216d88f0bd9ab09fbca3e30227b8dd754197ac
+  data.tar.gz: 1a805ae47035578ffdc854e39185fda0f025bde5b9169166a035f38bd406006fac6eb815911cca511e0081664cd8979af0b65315b49583ddc853e244184f0303

data/.codespellignore

@@ -0,0 +1 @@
+paeth

data/.yamllint

@@ -0,0 +1,16 @@
+extends: default
+ignore: |
+  build/
+  node_modules/
+  runtime/build/
+  tmp/
+  **/*.dSYM/**
+
+rules:
+  comments:
+    min-spaces-from-content: 1
+  document-start: disable
+  line-length:
+    max: 200
+  truthy:
+    check-keys: false

data/CHANGELOG.md

@@ -2,11 +2,14 @@
 
 ## [Unreleased]
 
+## [0.2.1] - 2026-09-26
+
+- Limit decoded PNG text metadata to prevent excessive memory use.
+
 ## [0.2.0] - 2026-09-25
 
 - Add shared median-cut quantization and indexed color dithering.
 - Add fixed 256-color and web-safe palettes.
-- Update gem author metadata.
 
 ## [0.1.0] - 2026-09-23
 

data/lib/tessel/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Tessel
-  VERSION = "0.2.0"
+  VERSION = "0.2.1"
 end

data/lib/tessel.rb

@@ -422,10 +422,12 @@ module Tessel
       module_function
 
       ADAM7 = [[0, 0, 8, 8], [4, 0, 8, 8], [0, 4, 4, 8], [2, 0, 4, 4], [0, 2, 2, 4], [1, 0, 2, 2], [0, 1, 1, 2]].freeze
+      MAX_METADATA_BYTES = 1_048_576
 
-      def decode(bytes, max_pixels: 16384 * 16384, verify_crc: true)
+      def decode(bytes, max_pixels: 16384 * 16384, max_metadata_bytes: MAX_METADATA_BYTES, verify_crc: true)
         bytes = String(bytes).b
         raise DecodeError, "invalid PNG signature" unless bytes.start_with?(SIGNATURE)
+        raise ArgumentError, "max_metadata_bytes must be non-negative" unless max_metadata_bytes.is_a?(Integer) && !max_metadata_bytes.negative?
 
         chunks = []
         offset = SIGNATURE.bytesize
@@ -472,12 +474,12 @@ module Tessel
             idat_ended = true
           end
         end
-        parse(chunks, max_pixels: max_pixels)
+        parse(chunks, max_pixels: max_pixels, max_metadata_bytes: max_metadata_bytes)
       rescue Zlib::Error => e
         raise DecodeError, "invalid PNG data: #{e.message}"
       end
 
-      def parse(chunks, max_pixels:)
+      def parse(chunks, max_pixels:, max_metadata_bytes:)
         raise DecodeError, "PNG is missing IHDR" unless chunks.first&.first == "IHDR"
         raise DecodeError, "invalid IHDR length" unless chunks.first[1].bytesize == 13
         width, height, bit_depth, color_type, compression, filter_method, interlace = chunks.first[1].unpack("N2C5")
@@ -561,7 +563,7 @@ module Tessel
             end
           end
         end
-        Image.from_rgba(width, height, rgba, metadata: parse_metadata(chunks))
+        Image.from_rgba(width, height, rgba, metadata: parse_metadata(chunks, max_metadata_bytes))
       end
       private_class_method :parse
 
@@ -620,12 +622,14 @@ module Tessel
       end
       private_class_method :pixel_rgba
 
-      def parse_metadata(chunks)
+      def parse_metadata(chunks, remaining)
         chunks.each_with_object({}) do |(type, data), metadata|
           case type
           when "tEXt"
             key, value = data.split("\0", 2)
             raise DecodeError, "invalid PNG tEXt chunk" unless key && !key.empty? && value
+            raise LimitError, "PNG metadata exceeds limit" if key.bytesize + value.bytesize > remaining
+            remaining -= key.bytesize + value.bytesize
             metadata[key.force_encoding("ISO-8859-1").encode("UTF-8")] = value.force_encoding("ISO-8859-1").encode("UTF-8")
           when "iTXt"
             key, rest = data.split("\0", 2)
@@ -637,7 +641,10 @@ module Tessel
             translated_end = text.index("\0", language_end + 1) if language_end
             raise DecodeError, "invalid PNG iTXt chunk" unless translated_end
             value = text.byteslice(translated_end + 1..)
-            value = Zlib::Inflate.inflate(value) if compressed == 1
+            raise LimitError, "PNG metadata exceeds limit" if key.bytesize > remaining
+            value = inflate_metadata(value, remaining - key.bytesize) if compressed == 1
+            raise LimitError, "PNG metadata exceeds limit" if value.bytesize > remaining - key.bytesize
+            remaining -= key.bytesize + value.bytesize
             value.force_encoding("UTF-8")
             raise DecodeError, "invalid PNG iTXt text" unless value.valid_encoding?
             key.force_encoding("UTF-8")
@@ -647,6 +654,23 @@ module Tessel
         end
       end
       private_class_method :parse_metadata
+
+      def inflate_metadata(data, limit)
+        output = "".b
+        inflater = Zlib::Inflate.new
+        append = lambda do |part|
+          raise LimitError, "PNG metadata exceeds limit" if part.bytesize > limit - output.bytesize
+          output << part
+        end
+        begin
+          (0...data.bytesize).step(1024) { |offset| inflater.inflate(data.byteslice(offset, 1024), &append) }
+          inflater.finish(&append)
+        ensure
+          inflater.close
+        end
+        output
+      end
+      private_class_method :inflate_metadata
     end
 
     module_function

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tessel
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1
 platform: ruby
 authors:
 - Yudai Takada
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-09-25 00:00:00.000000000 Z
+date: 2026-09-26 00:00:00.000000000 Z
 dependencies: []
 description: A dependency-light PNG reader/writer and shared RGBA8 pixel surface.
 email:
@@ -17,6 +17,8 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".codespellignore"
+- ".yamllint"
 - CHANGELOG.md
 - LICENSE.txt
 - README.md