Comments (1)
fintelia
commented on July 17, 2024
Yeah, that all sounds reasonable. The animation decoding API has always gotten less attention than other parts of the crate, so it could certainly be improved.
A big motivation for memory limits has been to ensure that the crate can actually by fuzz tested effectively. If you can trivially craft an image that triggers an OOM, then the fuzzer is going to find it almost instantly and you won't make much progress trying actually interesting inputs. As long as we can fuzz the underlying decoding logic, I'm less worried about having some convenience methods that potentially allocate unbounded amounts of memory (but ideally with documentation saying that!)
from image.
Related Issues (20)
- new test failure on 32-bit x86 (i686) in image v0.24.8 compared to v0.24.7 HOT 3
- new test failure on s390x (big-endian / IBM System Z) in image v0.24.8 compared to v0.24.7 HOT 2
- Failing AVIF and TIFF tests in `tests/limits.rs` HOT 2
- Incorrect documentation of `AvifEncoder::new_with_speed_quality`
- Undefined behavior when encoding AVIF image HOT 19
- PNG decoding relies on `output_buffer_size()` function that may overflow HOT 1
- Add `par_enumerate_rows(_mut)` to `ImageBuffer` and friends HOT 5
- `io::Reader` should have a way to decode animations
- No method to get xoffset/yoffset from SubImage after deprecating bounds() in #2036 HOT 1
- Use `-Z minimal-versions` to test MSRV HOT 1
- `ImageDecoder::read_image` should take `&[MaybeUninit<u8>]` as opposed to `&[u8]` HOT 7
- with_guessed_format() fails on one machine, but not the other. HOT 4
- Panic on invalid input to Image::io::Reader::decode HOT 5
- From DynamicImage to Vec<u8>
- exit code: 0xc0000135, STATUS_DLL_NOT_FOUND after enabling avif-decoder HOT 3
- Seemingly incorrect Avif bit depth assertion HOT 2
- Webp encoder version is outdated and vulnerable HOT 2
- Get frame count of animated images (animated WebP, GIF) HOT 1
- Decoding out of image::io::Reader directly into user-controlled buffer HOT 4
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from image.