Tidy the changelog wording for the decoder limits

The changelog and the macro comment called the Reader Resource Limits
guidance proposed. The MaxMind DB specification change has merged
(maxmind/MaxMind-DB#282). The second bullet also now says
"denial-of-service issue" to match the first.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

Author: oschwald

Changes.md

@@ -5,20 +5,19 @@
   one entry cost exponential time and memory from a small file. The decoder now
   limits each returned list to 65,536 values and returns
   `MMDB_DECODER_LIMIT_ERROR` when an entry exceeds it. The largest real records
-  MaxMind produces decode a few hundred values. This follows the proposed Reader
-  Resource Limits guidance for the MaxMind DB specification. See
-  GHSA-hj94-g986-h9r7.
-- Fixed a related payload-amplification denial of service. A crafted database
-  can point many times at one large value, so `MMDB_get_entry_data_list()`
-  returns a bounded number of nodes that together reference far more bytes than
-  the file holds. A caller that copies each node into a string then materializes
-  that amplified total. The decoder now also limits the total string and bytes
-  payload it exposes for a single entry to 2 MiB. Exceeding either new limit
-  returns `MMDB_DECODER_LIMIT_ERROR` and leaves the output list set to `NULL`.
-  These limits also protect the `languages` and `description` structures read by
-  `MMDB_open()`, where an over-limit structure is reported as
-  `MMDB_INVALID_METADATA_ERROR`. Both limits can be raised when rebuilding the
-  library with `-DMAXIMUM_DATA_STRUCTURE_VALUES=<values>` and
+  MaxMind produces decode a few hundred values. This follows the Reader Resource
+  Limits guidance in the MaxMind DB specification. See GHSA-hj94-g986-h9r7.
+- Fixed a related payload-amplification denial-of-service issue. A crafted
+  database can point many times at one large value, so
+  `MMDB_get_entry_data_list()` returns a bounded number of nodes that together
+  reference far more bytes than the file holds. A caller that copies each node
+  into a string then materializes that amplified total. The decoder now also
+  limits the total string and bytes payload it exposes for a single entry to 2
+  MiB. Exceeding either new limit returns `MMDB_DECODER_LIMIT_ERROR` and leaves
+  the output list set to `NULL`. These limits also protect the `languages` and
+  `description` structures read by `MMDB_open()`, where an over-limit structure
+  is reported as `MMDB_INVALID_METADATA_ERROR`. Both limits can be raised when
+  rebuilding the library with `-DMAXIMUM_DATA_STRUCTURE_VALUES=<values>` and
   `-DMAXIMUM_DATA_STRUCTURE_BYTES=<bytes>`. Applications using a packaged
   library can retrieve individual values with `MMDB_get_value()` or
   `MMDB_aget_value()` without expanding the complete structure. See

src/maxminddb.c

@@ -38,8 +38,8 @@ typedef ADDRESS_FAMILY sa_family_t;
 // The maximum number of data-section values decoded for a single entry. This
 // bounds a pointer fan-out, where nested pointers to shared targets would
 // otherwise cost 2**depth decode operations. The largest real records decode a
-// few hundred values, so this leaves a wide margin. See the proposed "Reader
-// Resource Limits" guidance for the MaxMind DB specification.
+// few hundred values, so this leaves a wide margin. See "Reader Resource
+// Limits" in the MaxMind DB specification.
 #ifndef MAXIMUM_DATA_STRUCTURE_VALUES
     #define MAXIMUM_DATA_STRUCTURE_VALUES (1U << 16)
 #endif