decodePng
Decodes one image under the snapshot's encoded-byte, dimension, and pixel-payload ceilings. Implementations must inspect dimensions before native allocation and release partial resources after any failure. Callers independently check the returned size before retaining or copying image data.
Return
detached immutable pixels within the selected ceilings.
Parameters
bytes
caller-owned input, never retained or modified.
limits
immutable loading and image-allocation ceilings.
Throws
when input, decoding, or a ceiling check fails.