Function decode_rgba8_within 

pub fn decode_rgba8_within(
    bytes: &[u8],
    max_pixels: u64,
) -> Result<Rgba8, ImageError>

Like decode_rgba8, but rejects images with more than max_pixels pixels before decoding any image data.

Errors

Fails when bytes is not a complete PNG or the header declares more than max_pixels pixels.