Linux & Tech news 📰

SGS · 4 September 2024 10:41

Long life for JPEG XL

github.com/mozilla/standards-positions

Firefox will consider a Rust implementation of JPEG-XL

mozilla:main ← mozilla:bholley-patch-1

opened 08:03PM - 03 Sep 24 UTC

bholley

+1 -1

Over the past few months, we’ve had some productive conversations with the JPEG-…XL team at Google Research around the future of the format in Firefox. Our primary concern has long been the increased attack surface of the reference decoder (currently behind a pref in Firefox Nightly), which weighs in at more than 100,000 lines of multithreaded C++. To address this concern, the team at Google has agreed to apply their subject matter expertise to build a safe, performant, compact, and compatible JPEG-XL decoder in Rust, and integrate this decoder into Firefox. If they successfully contribute an implementation that satisfies these properties and meets our normal production requirements, we would ship it. Time will tell whether the format succeeds in becoming a universal JPEG replacement in the way some folks hope. In the event that it does, it would be unfortunate to potentially introduce memory safety vulnerabilities across the myriad of applications that would eventually need to support it. A safe, fast, and battle-tested Rust decoder from the original team could make that scenario much less likely, and so we’re using our leverage to encourage progress on this front. Previous discussion in #522.

daniel:// stenberg:// @bagder@mastodon.social

The current JPEG XL decoder in #Firefox apparently consists of more than 100,000 lines of multi-threaded C++

For just decoding an image format.

Not sure what it says about the format, the implementation and the Internet at large.