[bettercallcaleb]

Problem

Opening a malformed GGUF file can panic instead of returning a parsing error. Three independent, very small synthetic files reproduce this on the original main:

Malformed metadata	Original behavior
general.alignment = 0	Divide-by-zero panic in div_ceil
Key length u64::MAX	Integer overflow in Cur::take
Array element count u64::MAX	Vec::with_capacity capacity overflow

Change

• Use checked offset arithmetic for input reads and alignment, returning descriptive errors.
• Validate metadata length conversions and reject array counts exceeding remaining bytes.
• Bound the initial array allocation to avoid trusting file-declared capacities while still supporting larger valid arrays.
• Add a regression test covering all three failure modes without downloading a model.

Validation

• Regression test failed against original main with all three panics; passed with this patch.
• cargo test --test gguf — passed (6 tests).
• cargo test --lib — passed.
• cargo test --tests — passed (all integration suites, no model/GPU required for these cases).
• cargo check — passed.
• git diff --check — passed.

Tested with Rust 1.98 in an isolated container. Two files changed, one DCO-signed commit, no new dependencies.

This is a local malformed-file robustness fix; no broader security impact is claimed.

[Vasyl-Trefilov]

Thanks for contribution!! you are the first ever. I am very happy, thanks again