Andreas Molzer
Andreas Molzer
The rules currently specify: > Rule MEM-LEAK > In a secure Rust development, the forget function of std::mem (core::mem) must not be used. > Rule MEM-MANUALLYDROP > In a secure...
By chance I came across this fact: https://github.com/rust-lang/crates.io/blob/85bf66e511788523db925410dedc30cf91bb44d1/src/tasks/dump_db/dump-db.toml#L215 Apparently, the information about _who_ published a particular crate version is publicly available in the data dumps. Although that [might not have...
As noted [in this paper](https://www.cs.ox.ac.uk/files/6487/pwvault.pdf), not having to reencrypt the full database on change of the master password (i.e. letting K, L remain unchanged) poses a potential security problem which...
A write-up of one potential performance problem and improvements. The decompression of blocks happens one sub-block at a time, or less if the `BufRead` buffer does not cover the whole...
A draft of how to treat extensions. The main challenge is that the decoder assumes to be at particular states when calling `next_frame_info`, `read_next_frame` and `read_into_buffer`. Futhermore, the descriptor is...
Utilzing the new [simd](https://github.com/Frommi/miniz_oxide/blob/master/miniz_oxide/Cargo.toml#L25) feature in miniz_oxide. There is some potential pain points: * Runtime feature detection requires use of `std`, else it is limited to the statically assured cpu...
This adds integration of `xtest-data`. This crate ensures that all of our tests suites can be executed with the released packages on `crates.io`—even though they do not contain the image...
Several png tools would profit from or require processing unknown chunks. We should also check and help that the chunk flag bits are adhered to in all such processing. This...
What about doing the actual capping? It seems like finish_compressed_chunks() will happily keep allocating as much as the the zlib stream wants. _Originally posted by @jrmuizel in https://github.com/image-rs/image-png/pull/285#discussion_r578756052_ That is,...
Currently, `StreamWriter` either borrows or takes ownership of the underlying writer when it is constructed. There is no way to rescind that borrow while retaining the current encoding state, e.g....