webp

  • Want to keep track of this thread?
    Accounts can bookmark posts, watch threads for updates, and jump back to where you stopped reading.
    Create account
Ehh, one less step sometimes for meme reposting
 
The very implementation of WebP has had fatal flaws before, because Google can't write good software:
https://blog.isosceles.com/the-webp-0day/ (archive)
https://blog.cloudflare.com/uncovering-the-hidden-webp-vulnerability-cve-2023-4863/ (archive)
Image files contain compact information about the shape of the Huffman tree, which the decoder uses to reconstruct the tree, and build lookup tables for the codes. The bug in libwebp was in the code building the lookup tables. A specially crafted WebP file can contain a very unbalanced Huffman tree that contains codes much longer than any normal WebP file would have, and this made the function generating lookup tables write data beyond the buffer allocated for the lookup tables. Libwebp had checks for validity of the Huffman tree, but it would write the invalid lookup tables before the consistency check.
Libwebp is a mature library, maintained by seasoned professionals. But it's written in the C language, which has very few safeguards against programming errors, especially memory use. Despite the care taken in the library's development, a single erroneous assumption led to a critical vulnerability.
 
How feasible would it be to have all uploaded files converted to a leaner format? Make every image a webp. Significantly lower storage and bandwidth use at the cost of some processing power during the upload process. And as a bonus you only need to worry about a single format being displayed to the end user. It just works!
What's annoying with .webp is that Xenoforo doesn't support it for changing profile pictures or banners. Just a quick rant.
 
webp chads. We won
1730763198487.webp
 
I am irrationally angry, I hate webp so much, grrrrr
Don't ask me why, I won't tell you, the mere fact that you're asking means you're on the side of webp and I now hate you, grrrr
 
"I don't like the people who invented this format, therefore it is bad!", seethed the Kiwi, for no apparent reason - do y'all love the megacorp conglomerates who own the other formats like MPEG and JPEG? Cope and seethe. Also get a modern device or learn FFMPEG lol lmao.
Sent from my Google® Pixel℠ 9 Pro XL
 
Those pictures are beautiful. A Shame that whoever took them is unable to share where they took them from.
 
Back
Top Bottom