Seriously, every giant technology company that inputs/outputs PDFs has uniquely "solved" dealing with Ghostscript. I would love it if one such firm contracted with us to fix it for everyone.
Show this thread
Please reach out if anyone wants @trailofbits to apply better security engineering to ImageMagick, Ghostscript, etc. We're happy to dust off these codebases and bring them into 2018.https://twitter.com/lcamtuf/status/861027173401899009 …
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Hey Fermin, I'm happy to work on some targeted software hardening projects if you're interested.
End of conversation
New conversation -
-
-
I imagine submitting a series of patches to https://g.co/prp would be a good way to round this up.
-
It helps! But "patch rewards" and bug bounties in general are a passive reward mechanism that barely covers the cost of an active development effort.
- 1 more reply
New conversation -
-
-
-
FFmpeg takes security seriously. Please report vulnerabilities to ffmpeg-security@ffmpeg.org.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.