Skip to content

strypt v0.1.2

Choose a tag to compare

@github-actions github-actions released this 21 Sep 12:11
· 54 commits to main since this release

A PDF whose page tree names one object more than once is now refused. Rewriting such a file
dropped an object, and in the file that found this it was the document's only page, reported as a
success. Every release up to and including 0.1.1 is affected. Nothing leaked and no output was
wrong, so this is not a security fix; the risk is a saved copy missing a page. Found by the pdf
fuzz target (ADR-0057,
CHANGELOG).


Built from 2f8c933137fa13f5213aa89e4761bfb0d957a50d by scripts/build-release.sh; each binary was built twice, byte-identical.
Each has a CycloneDX SBOM, <file>.cdx.json, listed in SHA256SUMS.

sha256sum -c SHA256SUMS --ignore-missing
gh attestation verify <file> -R FadeHack/strypt

To rebuild, use this commit's rust-toolchain.toml on the same image and linker:

Target Runner image Linker
aarch64-apple-darwin macos15 20260907.0337.1 ld-1167.5
aarch64-unknown-linux-musl ubuntu24-arm64 20260907.118.1 GNU ld (GNU Binutils for Ubuntu) 2.42
x86_64-apple-darwin macos15 20260907.0337.1 ld-1167.5
x86_64-pc-windows-msvc win25-vs2026 20260907.229.1 Visual Studio 18.9.2
x86_64-unknown-linux-musl ubuntu24 20260907.300.1 GNU ld (GNU Binutils for Ubuntu) 2.42