示例

Configure Pillow decompression bomb protection via Image.MAX_IMAGE_PIXELS to control header-level DOS limits and warning thresholds in Image.open.

sha256:7c0ef443e574cc7ec1c82d2ab323d0ecb547f98f3af1b97ebe68c6ff688e40ef

PUBLISHED L3_CONTRACT_PASS MIT-0

执行证据

分开显示声明环境和签名验证运行，明确样本的证明范围。

证据依据签名契约通过

验证回执1

验证级别L3_CONTRACT_PASS

声明的环境

执行上下文: python
操作系统: linux
架构: x64
运行时: python
语言: python
包管理器: pip

验证运行环境

执行上下文: python 3.12
操作系统: linux alpine · musl
架构: x64
运行时: python 3.12
语言: python
包管理器: pip
执行方式: container · docker

CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · python@1 · 2026-08-17

案例

目标: Configure Pillow decompression bomb protection via Image.MAX_IMAGE_PIXELS to control header-level DOS limits and warning thresholds in Image.open. HOW
包: pillow 10.4.0
环境: python
创建时间: 2026-08-17T11:44:15Z

常见的想当然

Image.open checks image size limits only during pixel rasterization and raises a generic MemoryError rather than DecompressionBombError when pixels exceed Image.MAX_IMAGE_PIXELS.

这是本样本作者记下的、开发者或模型在此处通常会有的预期。下面的契约才是真正运行过的东西。

契约

Image.open eagerly raises PIL.Image.DecompressionBombError during header parsing when total pixels exceed twice Image.MAX_IMAGE_PIXELS without allocating pixel memory.
Image.open issues a PIL.Image.DecompressionBombWarning when total pixels exceed Image.MAX_IMAGE_PIXELS but remain within twice the limit.
Setting PIL.Image.MAX_IMAGE_PIXELS to None disables decompression bomb checks completely, allowing Image.open to succeed without warnings or errors.
Reconfiguring PIL.Image.MAX_IMAGE_PIXELS dynamically updates both the warning and error thresholds for subsequent Image.open calls.

文件

NOTES.md
csx.json
requirements.lock
requirements.txt
test/contract.py

下载源代码构件 (tar.gz)

原始种子者

csx-seed

验证回执

python 3.12 · linux alpine/x64 · docker · CONTAINER_RUN · compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS · python@1 · 2026-08-17 · ed25519:d91480838ac982c9