v0.4.1
Hardening release — decoder robustness against malformed/edge input. Valid-data output is byte-identical to 0.4.0 (golden unchanged).
- inflate: range-check distance symbol, validate stored-block NLEN, overflow-safe buffer sizing
- png: require in-range palette index, reject overflow-sized dimensions
- jpeg: accept only baseline/progressive SOF (reject lossless/arithmetic), bounds-check SOF read
- font: guard numberOfHMetrics == 0
- dsl: require photoGrid perRow >= 1; clamp oversized image height to the page