Dominik Schmidt b5e1222ec8 fix(thumbnails): overflow-safe BigTIFF bounds and correct LONG offset width ...

Review of #3332 surfaced two BigTIFF-only defects in the embedded-preview
walker (attacker-controlled input):

- 64-bit IFD and SubIFD-array offsets were bounds-checked with `off + n > len`,
  which wraps for a crafted offset near 2^64, bypassing the guard and slicing
  out of range -> panic (recovered by the framework into a 500 + stack log on
  every crafted request, defeating the no-panic goal). Now overflow-safe.
- a tag value was always read as an 8-byte Uint64 in BigTIFF; a LONG (4-byte)
  offset in a big-endian BigTIFF was thereby shifted. Read it at its declared
  type width instead.

Adds tests for the overflow paths (assert ErrNoImageFromRawFile, no panic),
the big-endian LONG offset, and strengthens the truncation test to assert the
error. Trims a few over-long comments.

2026-08-19 11:24:50 +02:00

..

test_assets

chore: replace branded ggs test files

2025-01-28 09:38:22 +01:00

fontloader.go

use plain pkg module

2025-01-13 16:42:19 +01:00

preprocessor_imaging.go

chore: replace interface with any

2026-04-23 09:31:11 +02:00

preprocessor_test.go

test(thumbnails): expand raw preview coverage and quiet previewless logging

2026-08-18 16:48:32 +02:00

preprocessor_vips.go

feat(thumbnails): optional libvips based thumbnail generation

2024-10-17 14:05:27 +02:00

preprocessor.go

feat(thumbnails): register Nikon NRW and Sony SRF raw previews

2026-08-18 16:48:32 +02:00

rawtiff_test.go

fix(thumbnails): overflow-safe BigTIFF bounds and correct LONG offset width

2026-08-19 11:24:50 +02:00

rawtiff.go

fix(thumbnails): overflow-safe BigTIFF bounds and correct LONG offset width

2026-08-19 11:24:50 +02:00

textanalyzer_test.go

fix formatting

2023-10-06 10:29:08 +02:00

textanalyzer.go

rename folder extensions -> services

2022-06-27 14:05:36 +02:00