Sergey "Shnatsel" Davidoff

Results 943 comments of Sergey "Shnatsel" Davidoff

Yeah, this segfault is most likely a libdiffuzz bug. I'll try to look into it in a few days, but the current iteration of the code isn't even written by...

Additional mprotect page makes the program crash, which sort of works, but muddles the picture because you can't tell if it was an out-of-bounds write or an information leak. I...

#4 has added an option to detect OOB reads that come after the allocated buffer. It is toggled by an environment variable. OOB reads from before the allocated buffer are...

Heads up: this issue has been included in the [RustSec advisory database](https://github.com/RustSec/advisory-db). It will be surfaced by tools such as [cargo-audit](https://github.com/RustSec/cargo-audit) or [cargo-deny](https://github.com/EmbarkStudios/cargo-deny) from now on. Once a fix is...

Merged into RustSec repo with Linux targets. If you have a Windows or Mac, we'd appreciate you contributing precompiled binaries for those platforms.

Thanks for the links! Having SBOMs in firmware would certainly be cool! So far I've found everything not specifically designed for inclusion into binaries unsuitable, for two reasons: 1. Inclusion...

Is there any way I can help move this forward? It should be a rather trivial change.

We have added a policy describing what is an unmaintained crate: https://github.com/rustsec/advisory-db/blob/main/HOWTO_UNMAINTAINED.md

[Krita](https://krita.org/) spent a lot of time on a good interpolation method for their OpenGL canvas mode. Perhaps the approach or even the code can be copied if the license allows.

> Image codecs are easy targets due to complexity Emulsion uses Rust implementations of image codecs that are 100% memory-safe (at least png, gif and jpeg are; not sure about...