forked from 1b-agent/opencadstudio-upstream
The DWF package reader, the DGN stream inflater and the new DGN ExtendedColors scan each read a zlib/zip payload to its end, so a crafted or corrupt file could inflate until memory ran out. Cap them: 1 GiB for a whole DWF package, 512 MiB per DGN stream, 4 MiB per ExtendedColors record candidate - far above real files. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>