#[non_exhaustive]
pub enum ImplementationLimit { TooManyReferencedElements, TooManyLoadedElements, TooManyAttributes, }
Expand description

Errors for implementation-defined limits, to mitigate malicious SVG documents.

These get emitted as LoadingError::LimitExceeded or RenderingError::LimitExceeded. The limits are present to mitigate malicious SVG documents which may try to exhaust all available memory, or which would use large amounts of CPU time.

Variants (Non-exhaustive)§

This enum is marked as non-exhaustive
Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.
§

TooManyReferencedElements

Document exceeded the maximum number of times that elements can be referenced through URL fragments.

This is a mitigation for malicious documents that attempt to consume exponential amounts of CPU time by creating millions of references to SVG elements. For example, the <use> and <pattern> elements allow referencing other elements, which can in turn reference other elements. This can be used to create documents which would require exponential amounts of CPU time to be rendered.

Librsvg deals with both cases by placing a limit on how many references will be resolved during the SVG rendering process, that is, how many url(#foo) will be resolved.

These malicious documents are similar to the XML billion laughs attack, but done with SVG’s referencing features.

See issues #323 and #515 for examples for the <use> and <pattern> elements, respectively.

§

TooManyLoadedElements

Document exceeded the maximum number of elements that can be loaded.

This is a mitigation for SVG files which create millions of elements in an attempt to exhaust memory. Librsvg does not’t allow loading more than a certain number of elements during the initial loading process.

§

TooManyAttributes

Document exceeded the number of attributes that can be attached to an element.

This is here because librsvg uses u16 to address attributes. It should be essentially impossible to actually hit this limit, because the number of attributes that the SVG standard ascribes meaning to are lower than this limit.

Trait Implementations§

source§

impl Clone for ImplementationLimit

source§

fn clone(&self) -> ImplementationLimit

Returns a copy of the value. Read more
1.0.0 · source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
source§

impl Debug for ImplementationLimit

source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
source§

impl Display for ImplementationLimit

source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
source§

impl Copy for ImplementationLimit

Auto Trait Implementations§

Blanket Implementations§

source§

impl<T> Any for T
where T: 'static + ?Sized,

source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
source§

impl<T> Borrow<T> for T
where T: ?Sized,

source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
source§

impl<T> From<T> for T

source§

fn from(t: T) -> T

Returns the argument unchanged.

source§

impl<T, U> Into<U> for T
where U: From<T>,

source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

§

impl<T> Pointable for T

§

const ALIGN: usize = _

The alignment of pointer.
§

type Init = T

The type for initializers.
§

unsafe fn init(init: <T as Pointable>::Init) -> usize

Initializes a with the given initializer. Read more
§

unsafe fn deref<'a>(ptr: usize) -> &'a T

Dereferences the given pointer. Read more
§

unsafe fn deref_mut<'a>(ptr: usize) -> &'a mut T

Mutably dereferences the given pointer. Read more
§

unsafe fn drop(ptr: usize)

Drops the object pointed to by the given pointer. Read more
source§

impl<T> Same for T

§

type Output = T

Should always be Self
§

impl<SS, SP> SupersetOf<SS> for SP
where SS: SubsetOf<SP>,

§

fn to_subset(&self) -> Option<SS>

The inverse inclusion map: attempts to construct self from the equivalent element of its superset. Read more
§

fn is_in_subset(&self) -> bool

Checks if self is actually part of its subset T (and can be converted to it).
§

fn to_subset_unchecked(&self) -> SS

Use with care! Same as self.to_subset but without any property checks. Always succeeds.
§

fn from_subset(element: &SS) -> SP

The inclusion map: converts self to the equivalent element of its superset.
source§

impl<T> ToOwned for T
where T: Clone,

§

type Owned = T

The resulting type after obtaining ownership.
source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
source§

impl<T> ToString for T
where T: Display + ?Sized,

source§

default fn to_string(&self) -> String

Converts the given value to a String. Read more
source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

§

type Error = Infallible

The type returned in the event of a conversion error.
source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.