pure D JPEG decoder, with progressive JPEG support, public domain

ketmar via Digitalmars-d-announce digitalmars-d-announce at puremagic.com
Sat Jun 18 13:18:38 PDT 2016


On Saturday, 18 June 2016 at 19:52:20 UTC, Observer wrote:
> Not convinced?

no. i believe that it's all strongly overrated. don't run 
software with full access to your system, don't feed it with 
untrusted data, use sandboxes and such, etc. this is the way to 
go, not adding endless checks for all possible corner cases.

still, anyone is free to undo that: just replace all `\.ptr\b` 
with empty string -- and voila! all the bounds checking (and mind 
you, there is little, as many arrays are just malloc'ed anyway) 
is back. it's way easier to do than to put `.ptr` into vanilla 
code.

for my use cases `.ptr` access is ok: i prefer to leave bounds 
checking on for all builds, and manually escape it in the code 
when i feel that it is necessary.

in other words: i believe that validating data and 
loading/processing data should be separated. first validate all 
your jpegs with some tool, then use loaders to actually load and 
process 'em.


More information about the Digitalmars-d-announce mailing list