You are viewing a single thread.
View all comments
3 points

Isn’t there an issue with webp where it could potentially run arbitrary code?

permalink
report
reply
23 points

I actually held a presentation on it, yeah! It wasn’t really a webp problem, but an issue in the image decoder library which was used in basically… everything to open Webp. What happened was that you could tell the OS to build a super bad (Huffman Tree, which in turn led to the decoding not fitting in the allocated memory space and overflowing.

permalink
report
parent
reply
3 points

I see! Thank you for clearing that up.

permalink
report
parent
reply
4 points

Didn’t every imaging lib have similar issues? They are always supposed to be fast and get implemented in C and humans fail memory management. Neverending story…

permalink
report
parent
reply
2 points

“Can’t media format X run arbitrary code” is almost never an issue with the format itself and virtually always a bug with a particular decoder/player.

permalink
report
parent
reply

memes

!memes@lemmy.world

Create post

Community rules

1. Be civil

No trolling, bigotry or other insulting / annoying behaviour

2. No politics

This is non-politics community. For political memes please go to !politicalmemes@lemmy.world

3. No recent reposts

Check for reposts when posting a meme, you can only repost after 1 month

4. No bots

No bots without the express approval of the mods or the admins

5. No Spam/Ads

No advertisements or spam. This is an instance rule and the only way to live.

Sister communities

Community stats

  • 13K

    Monthly active users

  • 3.2K

    Posts

  • 99K

    Comments