Bob Friesenhahn

icon indicating a website link http://www.simplesystems.org/users/bfriesen/index.html icon indicating an email [email protected]

icon company GraphicsMagick Group icon location I am the principal maintainer of GraphicsMagick, assist with maintenance/releases of libtiff, and have made contributions to ImageMagick, libjpeg, and lcms.

Results 49 comments of Bob Friesenhahn

SECURITY: possible integer overflow with some cHRM chunk values

The problem is that automated fuzzing systems like oss-fuzz do not support human input to analyze and dismiss issues. Instead, all issues are equally important and can only be eliminated...

Failure to build tools/benchmark/benchmark_codec_avif.cc under Ubuntu 22.04 LTS

> libavif 1.0.0 is ABI-incompatible with versions prior to 1.0.0, which was released August 2023, and promises more stability going forward: That is interesting. Has a policy decision been made...

Failure to build tools/benchmark/benchmark_codec_avif.cc under Ubuntu 22.04 LTS

I was able to avoid the issue by adding this CMake option: ``` -DJPEGXL_ENABLE_BENCHMARK=OFF ```

libde265 no longer compiles after commit 5596fb2 "move configparam.cc into encoder directory"

I have re-enabled libde265 in the oss-fuzz builds and so hopefully it will be building again in a day or two. I also wrote a FIXME note about switching to...

libde265 no longer compiles after commit 5596fb2 "move configparam.cc into encoder directory"

The configure-based build works as before. I have switched the GraphicsMagick oss-fuzz build to use CMake instead.

Libheif method to determine valid enum values antagonizes oss-fuzz

Oss-fuzz has verified that this issue no longer exists.

heif_decode_image() returns heif_status=heif_error_Ok although returned heif_image is null while under resource limits

I have since enhanced the tracing of libheif security_limits to include the values set by libheif, as well as values over-ridden by GraphicsMagick. This is the full trace of the...

heif_decode_image() returns heif_status=heif_error_Ok although returned heif_image is null while under resource limits

> % git show > commit 388d4b35697cb06e18a36d24fea9da83fdc42fee (HEAD -> master, origin/master, origin/HEAD) > Author: Dirk Farin > Date: Sat Nov 29 22:51:36 2025 +0100 > > fix invalid read during...

heif_decode_image() returns heif_status=heif_error_Ok although returned heif_image is null while under resource limits

Oss-fuzz reports that this issue has been fixed.