mirror of
https://github.com/fergalmoran/ladybird.git
synced 2026-05-03 17:56:58 +00:00
The fuzzer found one heap buffer overflow here due to confusion between u32* and u8* (the given size is for bytes, but we used it for 32-bit elements, quadrupling it), and it looks like there's an opportunity for several more. This commit modernizes the picture loader by using String's built-in stream loader, and also adds several spec-compliance checks: The MIME type must be ASCII in a specific range, and the picture description must be UTF-8.