On: LogoFAIL: Secure Boot bypass with manipulated boot...

[yjftsjthsd-h]

This is one of the reasons I'm a big fan of wuffs[0] - it specifically targets dealing with formats like pictures, safely, and the result drops in to a C codebase to make the compat/migration story easy.

[0] https://github.com/google/wuffs

[pgeorgi → yjftsjthsd-h]

See also https://review.coreboot.org/c/coreboot/+/78271 :-)

[exikyut → pgeorgi]

> This commit also adapts our jpeg fuzz test to work with the modified

> API. After limiting it to deal only with approximately screen sized

> inputs, it fuzzed for 25 hours CPU time without a single hang or

> crash. This is a notable improvement over running the test with our

> old decoder which crashes within a minute.

Cooool.

[yjftsjthsd-h → pgeorgi]

Oh, very nice:) Great to see that!