5 ms·

Oxidize – Notes on moving Harfbuzz and Freetype tools and libraries to Rust

• deleted 2y ago
  [deleted]
• deleted 2y ago
  [deleted]
• gedw99 2y ago
  https://github.com/go-text/typesetting https://github.com/go-text/typesetting Same but in golang Used by gio, Fyne and ebiten golang gui projects
• ladyanita22 2y ago
  Google is rewriting HarfBuzz and FreeType in Rust The author of HarfBuzz has published [State of Text Rendering 2024](https://behdad.org/text2024/ https://behdad.org/text2024/), where he [describes](https://docs.google.com/document/d/1UnR2zKf3Z_DDRS6vLgBkSHUeqI3IGOEhWYh7rAIvsb8/preview#heading=h.iu7l3cbxef8b https://docs.google.com/document/d/1UnR2zKf3Z_DDRS6vLgBkSHUe...) the ongoing rewrite of the entire open-source text rendering stack in Rust which is funded by Google Fonts. The motivations for it are laid out at https://github.com/googlefonts/oxidize https://github.com/googlefonts/oxidize, and the actual code is at https://github.com/googlefonts/fontations https://github.com/googlefonts/fontations. The individual crates are already published to crates.io, too! The intent does seem to be to completely replace the C/C++ code in HarfBuzz and FreeType in Android and Chrome, which would be a massive win for security. Numerous other HarfBuzz/FreeType users such as Firefox and all the Linux desktop would also benefit. Curiously, Microsoft is rewriting their proprietary font parsing code in Rust as well: https://redd.it/12yg3cp https://redd.it/12yg3cp
  • acdha 2y ago
    This makes a ton of sense given how complex text rendering is, and the history of high-severity CVEs since text rendering is so exposed with things like web fonts and PDF embedding. I’d bet Apple is looking into that as well as they’ve certainly had their share of vulnerabilities, too.