- Joined
- Oct 3, 2022
Follow along with the video below to see how to install our site as a web app on your home screen.
Note: This feature may not be available in some browsers.
Image files contain compact information about the shape of the Huffman tree, which the decoder uses to reconstruct the tree, and build lookup tables for the codes. The bug in libwebp was in the code building the lookup tables. A specially crafted WebP file can contain a very unbalanced Huffman tree that contains codes much longer than any normal WebP file would have, and this made the function generating lookup tables write data beyond the buffer allocated for the lookup tables. Libwebp had checks for validity of the Huffman tree, but it would write the invalid lookup tables before the consistency check.
Libwebp is a mature library, maintained by seasoned professionals. But it's written in the C language, which has very few safeguards against programming errors, especially memory use. Despite the care taken in the library's development, a single erroneous assumption led to a critical vulnerability.
What's annoying with .webp is that Xenoforo doesn't support it for changing profile pictures or banners. Just a quick rant.How feasible would it be to have all uploaded files converted to a leaner format? Make every image a webp. Significantly lower storage and bandwidth use at the cost of some processing power during the upload process. And as a bonus you only need to worry about a single format being displayed to the end user. It just works!
Sent from my Google® Pixel℠ 9 Pro XL"I don't like the people who invented this format, therefore it is bad!", seethed the Kiwi, for no apparent reason - do y'all love the megacorp conglomerates who own the other formats like MPEG and JPEG? Cope and seethe. Also get a modern device or learn FFMPEG lol lmao.