Replace `NumberList::Unbounded` by `NumberList::MaxLength(n)`
To mitigate malicious SVGs, librsvg should have a limit on the number of entries that it can read from a NumberList
typed property; instead of NumberList::Unbounded
we should have a NumberList::MaxLength(n)
.
There are two usages of Unbounded
right now:
- In
filters/convolve_matrix.rs
- see #690 for the appropriate limit with theorder
of the primitive. - In
filters/component_transfer.rs
for thetableValues
attribute. It doesn't make sense to have more that 256 elements in that table as it remaps color component values, so it should be limited to that.