midasmatterhorn 643dcf55c6 project: a hostile ROI cannot overflow the crop math ...

The roi quad is stored raw from the control channel (crop.useRoi passes
serde_json's [f64;4] straight through, unlike the sibling edge fields,
which are clamped to plus/minus 20 000) and nothing repairs it on load.
Crop::edges converted it with round() as i32 and subtracted raw: an x of
-1e12 saturates to i32::MIN and w as i32 - l overflows in debug builds,
wrapping to a wrong-but-bounded crop in release.

Clamp each converted edge to the same plus/minus 20 000 the sibling
fields use and subtract with saturating_sub in edges() and frame_size().
Regression test: hostile_roi_cannot_overflow_crop_math — panics at
crates/project/src/render_queue.rs:774 on main; with the fix the hostile
quad degrades to a 1x1 frame and the sane-ROI behavior is unchanged.

2026-10-15 16:18:10 +03:00

..

src

project: a hostile ROI cannot overflow the crop math

2026-10-15 16:18:10 +03:00

Cargo.toml

M0.1–M0.7: workspace, time/geom/color/keyframe/project/raster/path/text/effects/render crates

2026-10-01 14:05:20 -04:00