3 ms·
Yes, let us never forget how many exploits there are in trivial codecs like ICO and BMP, because they're written in C(++): https://bugzilla.mozilla.org/show_bug
by Gankro 9y ago
Yes, let us never forget how many exploits there are in trivial codecs like ICO and BMP, because they're written in C(++): https://bugzilla.mozilla.org/show_bug.cgi?id=775794#c0 https://bugzilla.mozilla.org/show_bug.cgi?id=775794#c0
- nnethercote 9y agoBMP isn't so trivial, largely because it's been extended multiple times while never having a proper spec. http://searchfox.org/mozilla-central/rev/bbc1c59e460a27b20929b56489e2e55438de81fa/image/decoders/nsBMPDecoder.cpp#10-83 http://searchfox.org/mozilla-central/rev/bbc1c59e460a27b2092... has some of the gory details.
- tinus_hn 9y agoAnd .ico is just .bmp with some extras.