This repository has been archived on 2024-07-22. You can view files and clone it, but cannot push or open issues or pull requests.
mastodon/lib/paperclip
Pierre Bourdon 36bc90e8aa
blurhash_transcoder: prevent out-of-bound reads with <8bpp images (#20388)
The Blurhash library used by Mastodon requires an input encoded as 24
bits raw RGB data. The conversion to raw RGB using Imagemagick did not
previously specify the desired bit depth. In some situations, this leads
Imagemagick to output in a pixel format using less bpp than expected.
This then manifested as segfaults of the Sidekiq process due to
out-of-bounds read, or potentially a (highly noisy) memory infoleak.

Fixes #19235.
2022-11-11 07:45:16 +01:00
..
attachment_extensions.rb Remove dependency on running Redis server for db:setup (#18560) 2022-06-01 19:23:31 +02:00
blurhash_transcoder.rb blurhash_transcoder: prevent out-of-bound reads with <8bpp images (#20388) 2022-11-11 07:45:16 +01:00
color_extractor.rb
gif_transcoder.rb
image_extractor.rb
lazy_thumbnail.rb
response_with_limit_adapter.rb Fix upload of remote media with OpenStack Swift sometimes failing (#16998) 2021-11-16 21:36:28 +01:00
transcoder.rb Fix some media attachments being converted with too high framerates (#17619) 2022-02-22 17:11:22 +01:00
type_corrector.rb
url_generator_extensions.rb Switch from unmaintained paperclip to kt-paperclip (#16724) 2021-09-29 23:52:36 +02:00