mirror of
https://github.com/storytold/photocraft.git
synced 2026-10-23 10:35:58 +02:00
null 00000111
0b935da882
heic-rs 0.1.2 to 0.1.4 fix six panics on malformed files, found by fuzzing: four in release builds (a uuid box too small for its extended type, a block starting right of the picture, a conformance window larger than the picture, and a reference row below the picture) and two with overflow checks on (a PCM bit depth above the sample bit depth, a slice QP out of range). The API, MSRV and output are unchanged. Both pins move together: crates/heif and the codecs fuzz target, which calls heic-rs directly. guarded() stays as the backstop it was meant to be.
72 lines
1.2 KiB
TOML
72 lines
1.2 KiB
TOML
[package]
|
|
name = "photocraft-codecs-fuzz"
|
|
version = "0.0.0"
|
|
publish = false
|
|
edition = "2024"
|
|
license = "MIT OR Apache-2.0"
|
|
|
|
[package.metadata]
|
|
cargo-fuzz = true
|
|
|
|
# Standalone workspace so the main workspace's `crates/*` glob and lints do
|
|
# not apply (cargo-fuzz needs nightly + sanitizer flags).
|
|
[workspace]
|
|
|
|
[dependencies]
|
|
libfuzzer-sys = "0.4"
|
|
photocraft-codecs = { path = "..", features = ["heif"] }
|
|
# Called directly too: the codec turns its panics into errors (see decode_heif.rs).
|
|
heic-rs = "=0.1.4"
|
|
|
|
[profile.release]
|
|
debug = 1
|
|
|
|
[[bin]]
|
|
name = "decode_any"
|
|
path = "fuzz_targets/decode_any.rs"
|
|
test = false
|
|
doc = false
|
|
bench = false
|
|
|
|
[[bin]]
|
|
name = "decode_png"
|
|
path = "fuzz_targets/decode_png.rs"
|
|
test = false
|
|
doc = false
|
|
bench = false
|
|
|
|
[[bin]]
|
|
name = "decode_jpeg"
|
|
path = "fuzz_targets/decode_jpeg.rs"
|
|
test = false
|
|
doc = false
|
|
bench = false
|
|
|
|
[[bin]]
|
|
name = "decode_tiff"
|
|
path = "fuzz_targets/decode_tiff.rs"
|
|
test = false
|
|
doc = false
|
|
bench = false
|
|
|
|
[[bin]]
|
|
name = "decode_exr"
|
|
path = "fuzz_targets/decode_exr.rs"
|
|
test = false
|
|
doc = false
|
|
bench = false
|
|
|
|
[[bin]]
|
|
name = "decode_heif"
|
|
path = "fuzz_targets/decode_heif.rs"
|
|
test = false
|
|
doc = false
|
|
bench = false
|
|
|
|
[[bin]]
|
|
name = "decode_gif"
|
|
path = "fuzz_targets/decode_gif.rs"
|
|
test = false
|
|
doc = false
|
|
bench = false
|