Skip to content

v0.7.1

Choose a tag to compare

@lilith lilith released this 30 Mar 11:53
· 565 commits to main since this release

DoS fixes

  • fix: prevent i16::abs() negate overflow in gather_block — crafted JPEG with i16::MIN DCT coefficient caused panic in debug builds and incorrect stats in release builds
  • fix: bounds check in decode_mcu_row for SOS Huffman table indices — crafted JPEG with out-of-range table selector caused index-out-of-bounds panic in scanline decoder

Fuzzing

  • Expanded fuzz_decode to exercise all pixel formats, output targets, strictness levels, streaming callbacks, coefficient extraction, and auto-orient on every input
  • New fuzz_decode_paths: structured fuzzer varying all config combinations via arbitrary
  • New fuzz_push_decode: dedicated streaming path coverage for decode_rows / decode_rows_f32