fix: native-bpp decode accounting, GIF frame bombs, streaming remote bodies

A second adversarial round (with empirical reproduction against the vendored image 0.25) found the budget contract still had holes: - The probe billed 4 bytes/px, but 16-bit formats allocate their native layout during decode (8/px for RGBA16 PNG; TIFF stacks ~3x codec scratch on top). In-budget 16-bit images were falsely refused with self-contradictory notes, and the decode transient could exceed the budget the tiers claimed to enforce. The probe now reads the color type alongside the dimensions and bills the real peak (native layout + RGBA where they coexist, plus the TIFF codec factor), so refusals are honest and per-platform-correct, and the TIFF allowance follows the same accounting. - GIF: the probe reads the LOGICAL SCREEN, but a crafted frame may declare itself arbitrarily larger (empirically: a 10x10 probed screen with an 8192x8192 frame — 320 MB and 29 s from a probe-claimed-400-byte image). The GIF frame buffer is now capped to the probed size plus slack; frame bombs refuse like any other oversize. - Remote bodies on web streamed incrementally with the 64 MB cap enforced DURING the read (array_buffer() materialized a hostile chunked reply in full before any check could fire), aborting and cancelling the reader the moment the cap is crossed. - Degenerate raster entities (zero/non-finite size or vectors) no longer produce NaN placement math that aborted whole PDF exports — they resolve to the broken-reference placeholder. - Same-name resolution now has a deterministic winner (newest registration, via insertion order) instead of HashMap iteration order; URL query strings no longer break by-name matching; the image pick matches its refusal note by the quoted file name (substring collisions like a.tif/2011.tif attributed errors to the wrong file); a dropped remote outcome at the queue cap triggers one unconditional catch-up re-resolution instead of waiting for another event; the unknown-size refusal says so instead of printing 0x0; and the build script fails cleanly when there are no fonts to verify.
2026-09-18 06:23:30 +01:00
1 parent 58d3789bcf
commit c6db94e86f
@@ -3589,6 +3589,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = يجري فتح مناقشات OCS للمساعدة والأسئلة...
    .opening-ocs-web = يجري فتح OCS Web...
    .opening-the-command-reference = فتح مرجع الأوامر...
+    .image-refusal-unknown-size = تعذّر قياس أبعاد "__ocs_fmt_0__" من ترويسته وسيتجاوز فك ترميزه حد الصور __ocs_fmt_1__ ميغابايت في هذا الإصدار — لا يمكن إرفاقه.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" محمّل بالفعل بمحتوى مختلف؛ تم الاحتفاظ بالملف الموجود.
    .opening-patreon-page = يجري فتح صفحة Patreon...
    .opening-feedback-page = يجري فتح صفحة الملاحظات...
@@ -3576,6 +3576,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = Отваряне на OCS дискусии за помощ и въпроси...
    .opening-ocs-web = Отваряне на OCS уебсайта...
    .opening-the-command-reference = Отваряне на справочника за команди...
+    .image-refusal-unknown-size = Размерът на „__ocs_fmt_0__“ не можа да се измери от заглавната му част, а декодирането му би надвишило __ocs_fmt_1__ MB лимита на тази сборка — не може да се прикачи.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" вече е зареден с различно съдържание; съществуващият файл е запазен.
    .opening-patreon-page = Отваряне на страницата в Patreon...
    .opening-feedback-page = Отваряне на страницата за обратна връзка...
@@ -3574,6 +3574,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = Otevírání diskuzí OCS pro nápovědu a dotazy...
    .opening-ocs-web = Otevírání webu OCS...
    .opening-the-command-reference = Otevírání referenční příručky příkazů...
+    .image-refusal-unknown-size = „__ocs_fmt_0__“ nešlo změřit ze záhlaví a jeho dekódování by překročilo limit __ocs_fmt_1__ MB tohoto sestavení — nelze připojit.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" je již načten s jiným obsahem; existující soubor byl zachován.
    .opening-patreon-page = Otevírání stránky Patreon...
    .opening-feedback-page = Otevírá se stránka zpětné vazby...
@@ -3575,6 +3575,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = Eröffnung OCS Diskussionen für Hilfe und Fragen...
    .opening-ocs-web = Öffnen OCS Web...
    .opening-the-command-reference = Öffnen der Befehlsreferenz...
+    .image-refusal-unknown-size = „__ocs_fmt_0__“ konnte anhand des Headers nicht vermessen werden, und das Dekodieren überschreitet das __ocs_fmt_1__-MB-Limit dieses Builds — kann nicht angehängt werden.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" ist bereits mit anderem Inhalt geladen; die vorhandene Datei wurde behalten.
    .opening-patreon-page = Eröffnungsseite Patreon...
    .opening-feedback-page = Feedbackseite öffnen...
@@ -3571,6 +3571,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = Άνοιγμα των συζητήσεων OCS για βοήθεια και ερωτήσεις...
    .opening-ocs-web = Άνοιγμα του OCS Web...
    .opening-the-command-reference = Άνοιγμα της αναφοράς εντολών...
+    .image-refusal-unknown-size = Το "__ocs_fmt_0__" δεν μπόρεσε να μετρηθεί από την κεφαλίδα του και η αποκωδικοποίησή του θα ξεπερνούσε το όριο __ocs_fmt_1__ MB αυτής της build — δεν μπορεί να επισυναφθεί.
    .already-loaded-different-contents-kept = Το "__ocs_fmt_0__" είναι ήδη φορτωμένο με διαφορετικό περιεχόμενο· διατηρήθηκε το υπάρχον αρχείο.
    .opening-patreon-page = Άνοιγμα της σελίδας Patreon...
    .opening-feedback-page = Άνοιγμα της σελίδας σχολίων...
@@ -3572,6 +3572,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = Opening OCS Discussions for help and questions...
    .opening-ocs-web = Opening OCS Web...
    .opening-the-command-reference = Opening the command reference...
+    .image-refusal-unknown-size = "__ocs_fmt_0__" could not be sized from its header and decoding it exceeded the __ocs_fmt_1__ MB image limit of this build — it cannot be attached.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" is already loaded with different contents; the existing file was kept.
    .opening-patreon-page = Opening Patreon page...
    .opening-feedback-page = Opening feedback page...
@@ -3577,6 +3577,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = Abriendo Debates de OCS para obtener ayuda y hacer preguntas...
    .opening-ocs-web = Abriendo OCS Web...
    .opening-the-command-reference = Abriendo la referencia de comandos...
+    .image-refusal-unknown-size = "__ocs_fmt_0__" no pudo medirse por su cabecera y decodificarlo excedería el límite de __ocs_fmt_1__ MB de esta build — no se puede adjuntar.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" ya está cargado con contenido diferente; se conservó el archivo existente.
    .opening-patreon-page = Abriendo la página de Patreon...
    .opening-feedback-page = Abriendo la página de comentarios...
@@ -3576,6 +3576,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = OCS-keskustelujen avaaminen apua ja kysymyksiä varten...
    .opening-ocs-web = Avataan OCS Web...
    .opening-the-command-reference = Avataan komentoviittausta...
+    .image-refusal-unknown-size = Kohteen "__ocs_fmt_0__" kokoa ei voitu mitata otsakkeesta ja sen purkaminen ylittäisi tämän käännöksen __ocs_fmt_1__ MB kuvarajan — sitä ei voi liittää.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" on jo ladattu eri sisällöllä; olemassa oleva tiedosto säilytettiin.
    .opening-patreon-page = Avataan Patreon-sivua...
    .opening-feedback-page = Palautesivua avataan...
@@ -3577,6 +3577,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = Ouverture OCS Discussions pour l'aide et les questions...
    .opening-ocs-web = Ouverture du site Web OCS...
    .opening-the-command-reference = Ouverture de la référence des commandes...
+    .image-refusal-unknown-size = "__ocs_fmt_0__" n’a pas pu être mesuré par son en-tête et son décodage dépasserait la limite de __ocs_fmt_1__ Mo de cette version — impossible de l’attacher.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" est déjà chargé avec un contenu différent ; le fichier existant a été conservé.
    .opening-patreon-page = Ouverture de la page Patreon...
    .opening-feedback-page = Ouverture de la page de rétroaction...
@@ -3565,6 +3565,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = OCS मदद और प्रश्नों के लिए चर्चा खोलना।
    .opening-ocs-web = OCS वेब खोलना ...
    .opening-the-command-reference = कमांड संदर्भ खोला जा रहा है...
+    .image-refusal-unknown-size = "__ocs_fmt_0__" को उसके हेडर से मापा नहीं जा सका और उसे डिकोड करना इस बिल्ड की __ocs_fmt_1__ MB छवि सीमा पार कर देगा — जोड़ा नहीं जा सकता।
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" अलग सामग्री के साथ पहले से लोड है; मौजूदा फ़ाइल रखी गई।
    .opening-patreon-page = Patreon पृष्ठ खोला जा रहा है…
    .opening-feedback-page = प्रतिक्रिया पृष्ठ खोलना
@@ -3576,6 +3576,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = A OCS beszélgetések megnyitása segítségért és kérdésekért...
    .opening-ocs-web = A OCS web megnyitása...
    .opening-the-command-reference = A parancsreferencia megnyitása...
+    .image-refusal-unknown-size = A(z) "__ocs_fmt_0__" nem mérhető a fejlécéből, és dekódolása meghaladná ezen build __ocs_fmt_1__ MB-os képhatárát — nem csatolható.
    .already-loaded-different-contents-kept = A(z) "__ocs_fmt_0__" már betöltve eltérő tartalommal; a meglévő fájl megőrizve.
    .opening-patreon-page = Patreon oldal megnyitása...
    .opening-feedback-page = Visszajelzési oldal megnyitása...
@@ -3576,6 +3576,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = Apertura delle discussioni OCS per assistenza e domande...
    .opening-ocs-web = Apertura del Web OCS...
    .opening-the-command-reference = Apertura del riferimento dei comandi...
+    .image-refusal-unknown-size = "__ocs_fmt_0__" non è stato misurabile dall’intestazione e decodificarlo supererebbe il limite di __ocs_fmt_1__ MB di questa build — impossibile allegarlo.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" è già caricato con contenuti diversi; il file esistente è stato mantenuto.
    .opening-patreon-page = Apertura della pagina Patreon...
    .opening-feedback-page = Apertura della pagina di feedback...
@@ -3565,6 +3565,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = ヘルプと質問のため OCS ディスカッションを開いています...
    .opening-ocs-web = OCS Web を開いています...
    .opening-the-command-reference = コマンドリファレンスを開いています...
+    .image-refusal-unknown-size = "__ocs_fmt_0__" のサイズをヘッダーから測定できず、デコードするとこのビルドの __ocs_fmt_1__ MB 画像制限を超えます — 添付できません。
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" は既に別の内容で読み込まれています。既存のファイルを保持しました。
    .opening-patreon-page = Patreon ページを開いています...
    .opening-feedback-page = フィードバックページを開いています...
@@ -3576,6 +3576,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = OCS 열기 도움말 및 질문에 대한 토론...
    .opening-ocs-web = OCS 웹을 여는 중...
    .opening-the-command-reference = 명령 참조 열기...
+    .image-refusal-unknown-size = "__ocs_fmt_0__"의 크기를 헤더에서 측정할 수 없고 디코딩 시 이 빌드의 __ocs_fmt_1__ MB 이미지 한도를 초과합니다 — 첨부할 수 없습니다.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__"이(가) 이미 다른 내용으로 로드되었습니다. 기존 파일을 유지했습니다.
    .opening-patreon-page = Patreon 페이지를 여는 중...
    .opening-feedback-page = 피드백 페이지를 여는 중...
@@ -3575,6 +3575,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = Openen OCS Discussie voor hulp en vragen...
    .opening-ocs-web = Openen OCS Web...
    .opening-the-command-reference = Commandoreferentie openen...
+    .image-refusal-unknown-size = "__ocs_fmt_0__" kon niet via de header gemeten worden en decoderen overschrijdt de __ocs_fmt_1__ MB-limiet van deze build — kan niet worden toegevoegd.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" is al geladen met andere inhoud; het bestaande bestand is bewaard.
    .opening-patreon-page = Patreon pagina openen...
    .opening-feedback-page = Herinneringspagina openen...
@@ -3576,6 +3576,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = Otwieranie dyskusji OCS w celu uzyskania pomocy i pytań...
    .opening-ocs-web = Otwieranie OCS Web...
    .opening-the-command-reference = Otwieranie dokumentacji poleceń...
+    .image-refusal-unknown-size = „__ocs_fmt_0__” nie dał się zmierzyć z nagłówka, a jego dekodowanie przekroczy limit __ocs_fmt_1__ MB tej kompilacji — nie można go dołączyć.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" jest już wczytany z inną zawartością; zachowano istniejący plik.
    .opening-patreon-page = Otwieranie strony Patreon...
    .opening-feedback-page = Otwieram stronę z opiniami...
@@ -3577,6 +3577,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = Abrindo Discussões do OCS para ajuda e perguntas...
    .opening-ocs-web = Abrindo OCS Web...
    .opening-the-command-reference = Abrindo a referência de comandos...
+    .image-refusal-unknown-size = "__ocs_fmt_0__" não pôde ser medido pelo cabeçalho e a sua descodificação excedeu o limite de __ocs_fmt_1__ MB desta build — não pode ser anexado.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" já está carregado com conteúdo diferente; o ficheiro existente foi mantido.
    .opening-patreon-page = Abrindo página do Patreon...
    .opening-feedback-page = Abrindo página de comentários...
@@ -3578,6 +3578,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = Открытие OCS Дискуссии о помощи и вопросах
    .opening-ocs-web = Открытие OCS Веб-сайт
    .opening-the-command-reference = Открытие справочника команд...
+    .image-refusal-unknown-size = «__ocs_fmt_0__» не удалось измерить по заголовку, а его декодирование превысит лимит __ocs_fmt_1__ МБ этой сборки — вложить нельзя.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" уже загружен с другим содержимым; существующий файл сохранён.
    .opening-patreon-page = Открытие страницы Patreon...
    .opening-feedback-page = Открываем страницу обратной связи...
@@ -3527,6 +3527,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = Yardım ve sorular için OCS Tartışmaları açılıyor...
    .opening-ocs-web = OCS Web açılıyor...
    .opening-the-command-reference = Komut başvurusu açılıyor...
+    .image-refusal-unknown-size = "__ocs_fmt_0__" başlığından ölçülemedi ve kodu çözülürse bu sürümün __ocs_fmt_1__ MB görüntü limiti aşılır — eklenemez.
    .already-loaded-different-contents-kept = "__ocs_fmt_0__" zaten farklı içerikle yüklü; mevcut dosya tutuldu.
    .opening-patreon-page = Patreon sayfası açılıyor...
    .opening-feedback-page = Geri bildirim sayfası açılıyor...
@@ -3560,6 +3560,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = 开幕OCS 讨论帮助和问题...
    .opening-ocs-web = 打开OCS网络...
    .opening-the-command-reference = 正在打开命令参考...
+    .image-refusal-unknown-size = 无法从文件头测得“__ocs_fmt_0__”的尺寸，解码将超过本版本 __ocs_fmt_1__ MB 的图像上限——无法附着。
    .already-loaded-different-contents-kept = "__ocs_fmt_0__"已以不同内容加载；保留了现有文件。
    .opening-patreon-page = 打开帕特伦的页面...
    .opening-feedback-page = 打开反馈页面...
@@ -3572,6 +3572,7 @@ view =
    .opening-ocs-discussions-for-help-and-questions = 開幕OCS 討論幫助和問題...
    .opening-ocs-web = 開啟OCS網路...
    .opening-the-command-reference = 正在開啟命令參考...
+    .image-refusal-unknown-size = 無法從檔頭測得「__ocs_fmt_0__」的尺寸，解碼將超過本版本 __ocs_fmt_1__ MB 的影像上限——無法附加。
    .already-loaded-different-contents-kept = "__ocs_fmt_0__"已以不同內容載入；保留了現有檔案。
    .opening-patreon-page = 開啟帕特倫的頁面...
    .opening-feedback-page = 開啟反饋頁面...