Le mer. 5 sept. 2018 17:48, Ray Strode via gtk-devel-list < [email protected]> a écrit :
> hi, > > On Tue, Sep 4, 2018, 6:19 PM Magnus Bergman <[email protected]> > wrote: > >> Over the years it has been discussed from time to time to replace >> gdk-pixbuf with something else[1][2]. > > [...] > >> I finally took some time to design an >> image loading library on top of cairo > > [...] > >> abydos, which at least >> suits my needs. And also some needs mentioned in this list over the >> years. First I thought it could suit the needs of GTK+ as well. > > So one thing i think a modern image library needs is sandboxing. the > loader should be contained with bubblewrap and it should just give back a > chunk of pixels in shared memory as a memfd or similar. > > then if it crashes it doesnt take down the app. if its exploited the most > the attacker can do is make the caller show the wrong image (which could > still be bad of course) > For foreign image, yes, but for system icons, that's just an overhead. > --Ray > _______________________________________________ > gtk-devel-list mailing list > [email protected] > https://mail.gnome.org/mailman/listinfo/gtk-devel-list >
_______________________________________________ gtk-devel-list mailing list [email protected] https://mail.gnome.org/mailman/listinfo/gtk-devel-list
