21 votes

Firefox considers a Rust implementation of JPEG-XL

Posted by hungariantoast
Tags: open source, web, browsers, firefox, jpeg.xl, source.github, rust
https://github.com/mozilla/standards-positions/pull/1064

Link information

This data is scraped automatically and may be incorrect.

Title
Firefox will consider a Rust implementation of JPEG-XL by bholley · Pull Request #1064 · mozilla/standards-positions
Authors
mozilla
Published
Sep 4 2024
Word count
148 words

2 comments

  1. [2]
    dblohm7
    Link
    I think this is the right approach. Image decoders are ripe for exploitation, and an excellent candidate for implementation in Rust.

    I think this is the right approach. Image decoders are ripe for exploitation, and an excellent candidate for implementation in Rust.

    15 votes
    1. Wes
      Link Parent
      Definitely. So many exploits start with decoders, for images, PDFs, and other data formats. Any safety you can add helps. It also makes for a good Rust candidate because it's likely a fairly...

      Definitely. So many exploits start with decoders, for images, PDFs, and other data formats. Any safety you can add helps. It also makes for a good Rust candidate because it's likely a fairly self-contained module, and won't need to interact much with other code.

      This makes a lot of sense for Mozilla, and I could also see Google coming to to same conclusion with Chromium, now that they're starting to integrate Rust as well. Back in 2021, everything was still being written in C++. Dark times.

      Generally I think AVIF makes more sense than JPEG-XL as a web (lossy) format, however the support for progressive decoding could be very useful to some websites. Additionally, it makes it easier to handle formats created by other tools when they're able to be displayed nicely in browsers.

      9 votes