webp

  • 🐕 I am attempting to get the site runnning as fast as possible. If you are experiencing slow page load times, please report it.
Ehh, one less step sometimes for meme reposting
 
The very implementation of WebP has had fatal flaws before, because Google can't write good software:
https://blog.isosceles.com/the-webp-0day/ (archive)
https://blog.cloudflare.com/uncovering-the-hidden-webp-vulnerability-cve-2023-4863/ (archive)
Image files contain compact information about the shape of the Huffman tree, which the decoder uses to reconstruct the tree, and build lookup tables for the codes. The bug in libwebp was in the code building the lookup tables. A specially crafted WebP file can contain a very unbalanced Huffman tree that contains codes much longer than any normal WebP file would have, and this made the function generating lookup tables write data beyond the buffer allocated for the lookup tables. Libwebp had checks for validity of the Huffman tree, but it would write the invalid lookup tables before the consistency check.
Libwebp is a mature library, maintained by seasoned professionals. But it's written in the C language, which has very few safeguards against programming errors, especially memory use. Despite the care taken in the library's development, a single erroneous assumption led to a critical vulnerability.
 
How feasible would it be to have all uploaded files converted to a leaner format? Make every image a webp. Significantly lower storage and bandwidth use at the cost of some processing power during the upload process. And as a bonus you only need to worry about a single format being displayed to the end user. It just works!
What's annoying with .webp is that Xenoforo doesn't support it for changing profile pictures or banners. Just a quick rant.
 
webp chads. We won
1730763198487.webp
 
Those pictures are beautiful. A Shame that whoever took them is unable to share where they took them from.
 
Back