dust-engine / dot_vox

Rust parser for MagicaVoxel .vox files.
MIT License
53 stars 20 forks source link

Validate counts of parsed objects before allocating memory for them. #40

Closed kpreid closed 1 year ago

kpreid commented 1 year ago

This prevents invalid or malicious files from causing the parser to allocate more memory than could possibly be necessary to hold the contents of the file.

Neo-Zhixing commented 1 year ago

Thank you! This is helpful.