From 22785b4d7b589979fcd44cb9bdac177b5f478169 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=8E=8B=E5=BE=B7=E5=AE=87?= <kvtodev@outlook.com>
Date: Tue, 8 Sep 2026 19:45:02 +0800
Subject: [PATCH] =?UTF-8?q?=E9=99=90=E5=88=B6=20Raw=20=E5=9B=BE=E7=89=87?=
 =?UTF-8?q?=E8=A7=A3=E7=A0=81=E8=B5=84=E6=BA=90=20=E4=B8=BA=20PNG=20?=
 =?UTF-8?q?=E8=A7=A3=E7=A0=81=E8=AE=BE=E7=BD=AE=E8=BE=B9=E9=95=BF=E5=92=8C?=
 =?UTF-8?q?=E5=88=86=E9=85=8D=E4=B8=8A=E9=99=90=20=E9=81=BF=E5=85=8D?=
 =?UTF-8?q?=E5=8E=8B=E7=BC=A9=E5=9B=BE=E7=89=87=E8=86=A8=E8=83=80=E5=AF=BC?=
 =?UTF-8?q?=E8=87=B4=E5=86=85=E5=AD=98=E8=80=97=E5=B0=BD?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 server-rs/crates/api-server/src/raw_image.rs | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/server-rs/crates/api-server/src/raw_image.rs b/server-rs/crates/api-server/src/raw_image.rs
index 879179b57..250dd071d 100644
--- a/server-rs/crates/api-server/src/raw_image.rs
+++ b/server-rs/crates/api-server/src/raw_image.rs
@@ -6,8 +6,8 @@ use axum::{
 use base64::{Engine as _, engine::general_purpose::STANDARD as BASE64_STANDARD};
 use image::{ImageFormat, ImageReader};
 use platform_image::{
-    RawImageEditOptions, ReferenceImage, create_vector_engine_raw_image_edit,
-    validate_raw_image_edit_dimensions,
+    RAW_IMAGE_MAX_EDGE, RAW_IMAGE_MAX_PIXELS, RawImageEditOptions, ReferenceImage,
+    create_vector_engine_raw_image_edit, validate_raw_image_edit_dimensions,
 };
 use serde::{Deserialize, Serialize};
 use serde_json::json;
@@ -197,9 +197,14 @@ fn decode_image(value: RawImageData, field: &str) -> Result<ReferenceImage, AppE
     if bytes.is_empty() {
         return Err(bad_request(format!("{field}.data 不能为空")));
     }
-    let reader = ImageReader::new(Cursor::new(bytes.as_slice()))
+    let mut reader = ImageReader::new(Cursor::new(bytes.as_slice()))
         .with_guessed_format()
         .map_err(|_| bad_request(format!("{field}.data 必须是有效 PNG 文件")))?;
+    let mut limits = image::Limits::default();
+    limits.max_image_width = Some(RAW_IMAGE_MAX_EDGE);
+    limits.max_image_height = Some(RAW_IMAGE_MAX_EDGE);
+    limits.max_alloc = Some(RAW_IMAGE_MAX_PIXELS.saturating_mul(4));
+    reader.limits(limits);
     if reader.format() != Some(ImageFormat::Png) {
         return Err(bad_request(format!("{field}.data 必须是有效 PNG 文件")));
     }