fixes: 12-bit wiring, buffer sizing, error-path cleanup, and test gating

[sedghi]

Summary

A batch of correctness, robustness, and test-infrastructure fixes across the codec packages. Each change is an independent commit.

Changes

• libjpeg-turbo-12bit — implement the codec end to end. The 12-bit decoder produced a single-component 16-bit frame but was decoding into a mismatched color space and buffer size; this corrects the output format and buffer sizing so the decoded dimensions and sample count are right. The dicom-codec wrapper for transfer syntax 1.2.840.10008.1.2.4.51 (previously an unimplemented stub that always threw) is now wired to the real decoder, and the package main/exports are corrected to the filenames the build actually emits. Adds a decode test against a real 12-bit fixture.

• Overflow-safe buffer sizing (openjpeg, openjph, libjpeg-8bit/12bit). The decoded-buffer size is width * height * components * bytesPerPixel, all taken from the encoded header. On the 32-bit wasm target that product can wrap around; the size math is now computed with a checked 64-bit multiply and a sane upper bound, so a malformed header can't produce an undersized allocation.

• openjpeg decoder — reject inputs it can't handle. Bail out cleanly on unsupported component counts and on buffers too small to contain a header, instead of reading/writing past the intended bounds.

• openjpeg BufferStream — bounds-check the callbacks. The skip/write/seek stream callbacks now clamp to the buffer extents rather than advancing past them.

• dicom-codec — free wasm instances on the error path. decode/encode now release the decoder/encoder instance in a finally, so a failed decode no longer leaks the instance and its heap buffers.

• Test infrastructure. The libjpeg-turbo-8bit suite is gated on a built dist/ so a build-less yarn test skips cleanly instead of failing with a module-not-found error; a root test script is added.

Verification

yarn test passes locally (13 passed | 75 skipped); the wasm-backed suites skip cleanly because the WebAssembly artifacts aren't built in a plain checkout. The wasm packages are compiled and their decode tests run in CI (the emsdk build matrix), which is the authoritative gate for the C++ changes here.

Summary by CodeRabbit

• New Features

  • Added support for decoding 12-bit JPEG images, including build and package updates to expose the codec.

• Bug Fixes

  • Improved cleanup during codec processing so resources are released even when decoding fails.
  • Added safer size checks and bounds handling to reduce crashes or invalid allocations when handling large or malformed images.

• Tests

  • Added coverage for 12-bit JPEG decoding, error handling, and resource cleanup.
  • Updated test scripts to run with Vitest.

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[coderabbitai]

Warning

Review limit reached

@sedghi, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 7 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 4ef2a382-b475-4b92-8b0f-0456ca490344

📥 Commits

Reviewing files that changed from the base of the PR and between 0f609bd and 3179998.

📒 Files selected for processing (4)

• .github/workflows/pr-checks.yml
• packages/libjpeg-turbo-12bit/src/JPEGDecoder.hpp
• packages/libjpeg-turbo-12bit/test/decode.test.js
• packages/openjpeg/src/J2KDecoder.hpp

📝 Walkthrough

Walkthrough

This PR enables the libjpeg-turbo 12-bit JPEG codec in the dispatcher, switches its decoder to grayscale 12-bit output, and ensures codecFactory always cleans up encoder/decoder instances via try/finally. It also adds overflow-checked buffer size computations across libjpeg-turbo 8-bit, openjpeg, and openjphjs decoders, plus new tests and Vitest configs.

Changes

12-bit JPEG codec enablement

Layer / File(s)	Summary
codecFactory cleanup guarantees packages/dicom-codec/src/codecs/codecFactory.js, packages/dicom-codec/test/dispatch.test.js	encode()/decode() move delete() calls into finally blocks so instances are cleaned up even on error; a new test verifies cleanup on decode failure.
Dispatcher wiring for 12-bit codec packages/dicom-codec/src/codecs/libjpegTurbo12bit.js	Wires real decode via codecFactory.runProcess/decode, delegates getPixelData, keeps encode unsupported.
Grayscale 12-bit decode path packages/libjpeg-turbo-12bit/src/JPEGDecoder.hpp	Switches decode to JCS_GRAYSCALE, updates frame info, adds overflow-checked/bounded buffer sizing, removes dead code.
Package config, integration and unit tests package.json, packages/libjpeg-turbo-12bit/package.json, packages/libjpeg-turbo-12bit/vitest.config.mjs, packages/dicom-codec/test/integration.test.js, packages/libjpeg-turbo-12bit/test/decode.test.js	Adds Vitest scripts/config, updates package exports/main, gates integration test on 12-bit build artifact and adds a 12-bit decode test case, and adds a dedicated decoder test suite.

Decoder buffer-size overflow hardening

Layer / File(s)	Summary
libjpeg-turbo 8-bit checked sizing packages/libjpeg-turbo-8bit/src/JPEGDecoder.hpp, packages/libjpeg-turbo-8bit/test/decode.test.js	Adds checkedDecodedSize helper used in decode(); tests gate on build artifact existence.
OpenJPEG bounds checks and hardening packages/openjpeg/src/BufferStream.hpp, packages/openjpeg/src/J2KDecoder.hpp, packages/openjpeg/src/J2KEncoder.hpp, packages/openjpeg/test/decode.test.js	Adds write/skip/seek bounds checks, decoded-size validation, component-count checks, encoder preallocation headroom, and robustness tests.
OpenJPH checked sizing packages/openjphjs/src/HTJ2KDecoder.hpp	Adds checkedDecodedSize helper applied before resizing the decoded buffer.

Estimated code review effort: 4 (Complex) | ~60 minutes

Sequence Diagram(s)

sequenceDiagram
  participant Dispatcher
  participant codecFactory
  participant JPEGDecoder
  Dispatcher->>codecFactory: decode(imageFrame, imageInfo)
  codecFactory->>JPEGDecoder: decode() (via runProcess)
  JPEGDecoder->>JPEGDecoder: checkedDecodedSize / grayscale 12-bit decode
  alt decode succeeds
    JPEGDecoder-->>codecFactory: decoded buffer
    codecFactory->>JPEGDecoder: delete() (finally)
    codecFactory-->>Dispatcher: imageFrame, imageInfo, duration
  else decode throws
    JPEGDecoder-->>codecFactory: error
    codecFactory->>JPEGDecoder: delete() (finally)
    codecFactory-->>Dispatcher: rethrow error
  end

Loading

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main changes: 12-bit codec wiring, safer buffer sizing, cleanup on error, and test gating.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fixes

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codspeed-hq]

Merging this PR will not alter performance

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

⚡ 1 improved benchmark
❌ 1 regressed benchmark
✅ 29 untouched benchmarks
⏩ 19 skipped benchmarks¹

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Benchmark	BASE	HEAD	Efficiency
❌	decode jpeg400jfif.jpg (600x800x8bit) — warm	10 ms	10.9 ms	-8.44%
⚡	encode CT1.RAW (HTJ2K lossless) — cold	36.7 ms	34.5 ms	+6.21%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing fixes (3179998) with main (04c3e87)}

Footnotes

1. 19 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[coderabbitai]

Actionable comments posted: 2

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (3)

packages/libjpeg-turbo-8bit/src/JPEGDecoder.hpp (1)

118-141: 🩺 Stability & Availability | 🔴 Critical | ⚡ Quick win

tjInstance leaks if checkedDecodedSize throws.

checkedDecodedSize(...) at line 131 can throw std::runtime_error for an oversized/zero-sized frame, but tjInstance (created at line 120) is only destroyed on the tjDecompress2 failure path and at normal completion — not on this new throw path. Since this validation is exercised precisely on attacker-controlled/malformed image dimensions, this introduces a leak of the native decompressor handle on every such input.

🐛 Proposed fix

     int pixelFormat = (frameInfo_.componentCount == 1) ? TJPF_GRAY : TJPF_RGB;
 
-    const size_t destinationSize = checkedDecodedSize(frameInfo_.width, frameInfo_.height, 1, tjPixelSize[pixelFormat]);
+    size_t destinationSize;
+    try {
+      destinationSize = checkedDecodedSize(frameInfo_.width, frameInfo_.height, 1, tjPixelSize[pixelFormat]);
+    } catch (...) {
+      tjDestroy(tjInstance);
+      throw;
+    }
     decoded_.resize(destinationSize);

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@packages/libjpeg-turbo-8bit/src/JPEGDecoder.hpp` around lines 118 - 141,
`decode()` leaks the native `tjInstance` if `checkedDecodedSize(...)` throws
before the explicit `tjDestroy` calls. Update `JPEGDecoder::decode` to ensure
the decompressor handle is always released on every exit path, including
exceptions from `checkedDecodedSize`, by using an RAII guard or equivalent
cleanup tied to `tjInitDecompress()`/`tjDestroy()`. Keep the existing error
handling in `readHeader_i` and `tjDecompress2`, but make the cleanup automatic
so malformed image dimensions cannot leak the handle.

packages/openjpeg/src/J2KDecoder.hpp (1)

862-867: 🩺 Stability & Availability | 🔴 Critical | ⚡ Quick win

checkedDecodedSize throw leaks l_stream, l_codec, and image.

If the computed destination size is zero or exceeds the 512 MiB cap (attacker-influenced via decomposition-level/dimension fields), the exception unwinds past l_stream/l_codec/image without any of the three being released, unlike the other error paths in this function.

🐛 Proposed fix

       const size_t bytesPerPixel = (frameInfo_.bitsPerSample + 8 - 1) / 8;
-      const size_t destinationSize = checkedDecodedSize(sizeAtDecompositionLevel.width, sizeAtDecompositionLevel.height, frameInfo_.componentCount, bytesPerPixel);
+      size_t destinationSize;
+      try {
+        destinationSize = checkedDecodedSize(sizeAtDecompositionLevel.width, sizeAtDecompositionLevel.height, frameInfo_.componentCount, bytesPerPixel);
+      } catch (...) {
+        opj_stream_destroy(l_stream);
+        opj_destroy_codec(l_codec);
+        opj_image_destroy(image);
+        throw;
+      }
       decoded_.resize(destinationSize);

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@packages/openjpeg/src/J2KDecoder.hpp` around lines 862 - 867, The
destination-size computation in J2KDecoder’s decode path can throw from
checkedDecodedSize before l_stream, l_codec, and image are released, causing a
leak on invalid or oversized dimensions. Update the cleanup flow around the
sizeAtDecompositionLevel/decoded_.resize block so any exception from
checkedDecodedSize or later allocation still frees those resources, matching the
other error paths in this function; use the existing cleanup logic for l_stream,
l_codec, and image rather than letting the exception escape first.

packages/libjpeg-turbo-12bit/src/JPEGDecoder.hpp (1)

115-172: 🩺 Stability & Availability | 🟠 Major | 🏗️ Heavy lift

Install a non-terminating libjpeg error handler
jpeg_std_error keeps libjpeg’s default error_exit, which aborts the runtime on fatal JPEG errors. Add a custom error manager with setjmp/longjmp so bad input can unwind as an exception instead of terminating the whole process/WASM instance.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@packages/libjpeg-turbo-12bit/src/JPEGDecoder.hpp` around lines 115 - 172, The
JPEGDecoder::decode path still uses jpeg_std_error with libjpeg’s default fatal
error_exit, so malformed input can terminate the process instead of unwinding
safely. Add a custom error manager for JPEGDecoder that installs a
non-terminating handler and uses setjmp/longjmp around jpeg_create_decompress,
jpeg_read_header, and jpeg_start_decompress so libjpeg errors are converted into
a C++ exception. Keep the existing cleanup via jpeg_destroy_decompress in the
error path and preserve the current buffer-size checks and grayscale decoding
setup.

🧹 Nitpick comments (3)

packages/dicom-codec/test/dispatch.test.js (1)

40-79: 📐 Maintainability & Code Quality | 🔵 Trivial | ⚡ Quick win

Consider adding a symmetric encoder cleanup test.

This test covers decode() cleanup on throw, but encode() got the same try/finally treatment in codecFactory.js and has no equivalent coverage.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@packages/dicom-codec/test/dispatch.test.js` around lines 40 - 79, Add a
matching cleanup test for the encode path in codecFactory by extending the
existing codecFactory instance cleanup coverage: create a FakeEncoder with
encode() throwing and delete() setting a flag, then call codecFactory.encode
with a similar context/codecConfig setup and assert the thrown error is
preserved and delete() still runs. Place the new test alongside the current
decode() cleanup test so both try/finally paths in codecFactory are covered
symmetrically.

packages/libjpeg-turbo-12bit/test/decode.test.js (2)

9-11: 📐 Maintainability & Code Quality | 🔵 Trivial | ⚡ Quick win

Fixture read isn't gated, so a missing fixture crashes the whole file instead of skipping.

ct12bit is read at module scope for both build variants, unlike the isBuilt dist-artifact gating. If the fixture file is ever absent, every test (including build-variant-skipped ones) fails hard rather than skipping gracefully, which runs counter to this PR's stated test-infra goal.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@packages/libjpeg-turbo-12bit/test/decode.test.js` around lines 9 - 11, The
fixture load for ct12bit is happening at module scope, so a missing JPEG file
crashes the entire test file before any build-variant gating can skip tests.
Move the readFileSync/resolve lookup into the test setup or guard it with the
same conditional used by isBuilt so decode.test.js can skip gracefully when the
fixture is absent. Keep the change localized around ct12bit and the existing
built-vs-skipped test paths.

---

34-55: 🩺 Stability & Availability | 🔵 Trivial | ⚡ Quick win

Wrap decoder in try/finally to avoid leaking the WASM instance on assertion failure.

decoder.delete() only runs if every preceding expect() passes. A failing assertion leaves the WASM decoder instance undeleted for the rest of the test run.

♻️ Proposed fix

   it.skipIf(!isBuilt)(
     "decodes the CT-512x512 12-bit fixture and reports correct dimensions/format",
     () => {
       const decoder = new codec.JPEGDecoder()
-      const encodedBuffer = decoder.getEncodedBuffer(ct12bit.length)
-      encodedBuffer.set(ct12bit)
-
-      decoder.decode()
-
-      const frameInfo = decoder.getFrameInfo()
-      expect(frameInfo.width).toBe(512)
-      expect(frameInfo.height).toBe(512)
-      expect(frameInfo.bitsPerSample).toBe(12)
-      expect(frameInfo.componentCount).toBe(1)
-
-      const decoded = decoder.getDecodedBuffer()
-      // One 16-bit-wide sample per pixel (grayscale, 1 component/pixel).
-      expect(decoded.length).toBe(512 * 512)
-
-      decoder.delete()
+      try {
+        const encodedBuffer = decoder.getEncodedBuffer(ct12bit.length)
+        encodedBuffer.set(ct12bit)
+
+        decoder.decode()
+
+        const frameInfo = decoder.getFrameInfo()
+        expect(frameInfo.width).toBe(512)
+        expect(frameInfo.height).toBe(512)
+        expect(frameInfo.bitsPerSample).toBe(12)
+        expect(frameInfo.componentCount).toBe(1)
+
+        const decoded = decoder.getDecodedBuffer()
+        expect(decoded.length).toBe(512 * 512)
+      } finally {
+        decoder.delete()
+      }
     }
   )

Same pattern applies to the truncated-input test at Lines 68-77.

Also applies to: 68-77

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@packages/libjpeg-turbo-12bit/test/decode.test.js` around lines 34 - 55, The
JPEGDecoder test cases in decode.test.js are leaking the WASM instance because
decoder.delete() is only reached after all expectations pass. Update the test
bodies that use codec.JPEGDecoder to wrap decode/getFrameInfo/getDecodedBuffer
assertions in a try/finally block so decoder.delete() always runs, including the
CT-512x512 case and the truncated-input test mentioned in the comment.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@packages/libjpeg-turbo-12bit/src/JPEGDecoder.hpp`:
- Around line 168-172: The decoded buffer in getDecodedBuffer() is being exposed
through Uint8ClampedArray.new_(), which clamps away 12-bit sample values before
codecFactory.js can reconstruct them. Update the getDecodedBuffer() path in
JPEGDecoder.hpp to return the raw typed_memory_view(...) or another 16-bit typed
array so the original sample data is preserved; use the existing decoded_ buffer
and stride/output_size logic as the place to adjust the return type.

In `@packages/openjpeg/src/J2KDecoder.hpp`:
- Around line 835-841: The component-count validation in decode_i leaks native
OpenJPEG resources because the new unsupported count throw path only destroys
image and skips releasing l_codec and l_stream. Update this branch to mirror the
other failure paths in J2KDecoder::decode_i by cleaning up all allocated handles
before throwing, using the same teardown pattern already present for earlier
error cases.

---

Outside diff comments:
In `@packages/libjpeg-turbo-12bit/src/JPEGDecoder.hpp`:
- Around line 115-172: The JPEGDecoder::decode path still uses jpeg_std_error
with libjpeg’s default fatal error_exit, so malformed input can terminate the
process instead of unwinding safely. Add a custom error manager for JPEGDecoder
that installs a non-terminating handler and uses setjmp/longjmp around
jpeg_create_decompress, jpeg_read_header, and jpeg_start_decompress so libjpeg
errors are converted into a C++ exception. Keep the existing cleanup via
jpeg_destroy_decompress in the error path and preserve the current buffer-size
checks and grayscale decoding setup.

In `@packages/libjpeg-turbo-8bit/src/JPEGDecoder.hpp`:
- Around line 118-141: `decode()` leaks the native `tjInstance` if
`checkedDecodedSize(...)` throws before the explicit `tjDestroy` calls. Update
`JPEGDecoder::decode` to ensure the decompressor handle is always released on
every exit path, including exceptions from `checkedDecodedSize`, by using an
RAII guard or equivalent cleanup tied to `tjInitDecompress()`/`tjDestroy()`.
Keep the existing error handling in `readHeader_i` and `tjDecompress2`, but make
the cleanup automatic so malformed image dimensions cannot leak the handle.

In `@packages/openjpeg/src/J2KDecoder.hpp`:
- Around line 862-867: The destination-size computation in J2KDecoder’s decode
path can throw from checkedDecodedSize before l_stream, l_codec, and image are
released, causing a leak on invalid or oversized dimensions. Update the cleanup
flow around the sizeAtDecompositionLevel/decoded_.resize block so any exception
from checkedDecodedSize or later allocation still frees those resources,
matching the other error paths in this function; use the existing cleanup logic
for l_stream, l_codec, and image rather than letting the exception escape first.

---

Nitpick comments:
In `@packages/dicom-codec/test/dispatch.test.js`:
- Around line 40-79: Add a matching cleanup test for the encode path in
codecFactory by extending the existing codecFactory instance cleanup coverage:
create a FakeEncoder with encode() throwing and delete() setting a flag, then
call codecFactory.encode with a similar context/codecConfig setup and assert the
thrown error is preserved and delete() still runs. Place the new test alongside
the current decode() cleanup test so both try/finally paths in codecFactory are
covered symmetrically.

In `@packages/libjpeg-turbo-12bit/test/decode.test.js`:
- Around line 9-11: The fixture load for ct12bit is happening at module scope,
so a missing JPEG file crashes the entire test file before any build-variant
gating can skip tests. Move the readFileSync/resolve lookup into the test setup
or guard it with the same conditional used by isBuilt so decode.test.js can skip
gracefully when the fixture is absent. Keep the change localized around ct12bit
and the existing built-vs-skipped test paths.
- Around line 34-55: The JPEGDecoder test cases in decode.test.js are leaking
the WASM instance because decoder.delete() is only reached after all
expectations pass. Update the test bodies that use codec.JPEGDecoder to wrap
decode/getFrameInfo/getDecodedBuffer assertions in a try/finally block so
decoder.delete() always runs, including the CT-512x512 case and the
truncated-input test mentioned in the comment.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: a85cc5ec-e4ee-4c59-9e98-dbf54b33e9af

📥 Commits

Reviewing files that changed from the base of the PR and between 04c3e87 and 0f609bd.

📒 Files selected for processing (16)

• package.json
• packages/dicom-codec/src/codecs/codecFactory.js
• packages/dicom-codec/src/codecs/libjpegTurbo12bit.js
• packages/dicom-codec/test/dispatch.test.js
• packages/dicom-codec/test/integration.test.js
• packages/libjpeg-turbo-12bit/package.json
• packages/libjpeg-turbo-12bit/src/JPEGDecoder.hpp
• packages/libjpeg-turbo-12bit/test/decode.test.js
• packages/libjpeg-turbo-12bit/vitest.config.mjs
• packages/libjpeg-turbo-8bit/src/JPEGDecoder.hpp
• packages/libjpeg-turbo-8bit/test/decode.test.js
• packages/openjpeg/src/BufferStream.hpp
• packages/openjpeg/src/J2KDecoder.hpp
• packages/openjpeg/src/J2KEncoder.hpp
• packages/openjpeg/test/decode.test.js
• packages/openjphjs/src/HTJ2KDecoder.hpp

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[sedghi]

Closing in favor of #73: every fix on this branch (12-bit decode path and package entry points, dispatcher wiring, codecFactory instance cleanup, openjpeg decoder guards and BufferStream bounds, wasm32 size-overflow checks) now lives there, consolidated with the second-round fixes found by the pixel-correctness suite, each paired with the tests that fail without it. Merge order: #72 (tests only, targets main) first, then #73.