Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by ctz on Tuesday September 26, 2023 @12:40PM
(#37661910)
I think your intuition on the cost of not-taken bounds check branches is off, especially in the context of devices that spend most of their resources browsing the web, running radios, powering screen backlights. I bet any holistic measurement could not tell the difference.
[ Parent
| on HN ]