Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is one of the reasons I'm a big fan of wuffs[0] - it specifically targets dealing with formats like pictures, safely, and the result drops in to a C codebase to make the compat/migration story easy.

[0] https://github.com/google/wuffs



See also https://review.coreboot.org/c/coreboot/+/78271 :-)


> This commit also adapts our jpeg fuzz test to work with the modified

> API. After limiting it to deal only with approximately screen sized

> inputs, it fuzzed for 25 hours CPU time without a single hang or

> crash. This is a notable improvement over running the test with our

> old decoder which crashes within a minute.

Cooool.


Oh, very nice:) Great to see that!




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: