News for hackers. Stuff that matters.
Re:Memory-Safe WebP Decoding by thereisno on Saturday October 03, 2026 @06:13PM (#49948295)
Validators separate from parsers have led to many vulnerabilities in the past. There's always something the validator didn't catch that crashed the parser anyway.
Re:Memory-Safe WebP Decoding by nine_k on Sunday October 04, 2026 @01:22AM (#49950899)
A validator before an unsafe parser is strictly better than just the unsafe parser, but worse than a safe parser.