openjpeg VS ungoogled-chromium-windows

mkdir ~/install cd ~/install wget https://github.com/uclouvain/openjpeg/archive/master.zip unzip master.zip cd openjpeg-master/ mkdir build cd build cmake -DCMAKE_BUILD_TYPE=Release .. make sudo make install sudo make clean cd

Details here, if you like reading bug reports. It took the cooperation of developers at all four levels to fix this. I wrote a test project to reproduce the problem, the jpeg2k developer was able to reproduce the problem under valgrind (a tool for finding bad pointer references in C, seldom needed by Rust users), an OpenJPEG developer fixed the C code, and everybody in the chain updated versions. Thanks to everyone who had a part in this.

> The whole file is effectively a write-what-where primitive2. In addition to that, the Count Info Table is not bounds checked either...

File formats like that, with many offsets in the file, are troublesome. There used to be more formats like that. Microsoft Word .doc is the classic example.

OpenJPEG 2000 has a similar problem. I just hit that yesterday.[1] Valgrind is finding references to un-initialized data which affect control flow, and running the JPEG decoder on valid but truncated files (which is allowed) is causing bad memory reference crashes and errors.

New formats like this are rare. People have learned. A modern exception is Unreal Engine 5's Nanite has much offset data, and there may be an attack surface there for hostile game content. Nanite is a way to store a graphics mesh with both multiple levels of detail and common submeshes. It's a hierarchy of directed acyclic graphs, flattened into a linear file with offsets. And, sure enough, there are many crash reports. At least Unreal provides a validator for the format.

(If only C/C++ had slices in the language. Most of the things for which pointer arithmetic is used can be done with slices. Slices really are pointer arithmetic, with sanity.)

[1] https://github.com/uclouvain/openjpeg/issues/1459

JPEG 2000 decoder crashes Trying to read files at reduced resolution crashes with memory access errors. This is jpeg2k (Rust) calling jpeg2000-sys (Rust glue to C foreign function interfaces) calling OpenJPEG (all C). The problem can now be reproduced at the C level alone, under Valgrind. The developers of the top two levels have been very helpful, but the trouble is down in the rather painful C code at the bottom. The OpenJPEG maintainers are way behind on fixes, despite being funded.

It certainly was a risk in 2013, when the open source libraries were slow and riddled with bugs. Today, there are two stable, well maintained and fast open source libraries available:

https://github.com/uclouvain/openjpeg

echo "Configuring NBIS" make config echo "Making NBIS" make it echo "Installing NBIS" make install echo "Adding NBIS binaries to path" echo 'export PATH="$PWD/build/bin:$PATH" > ~/.bashrc' source ~/.bashrc cd ../browser/windows wget "https://github.com/ungoogled-software/ungoogled-chromium-windows/releases/download/111.0.5563.65-1.1/ungoogled-chromium_111.0.5563.65-1.1_windows_x64.zip" unzip ungoogled-chromium_111.0.5563.65-1.1_windows_x64.zip mv ungoogled-chromium_111.0.5563.65-1.1_windows windows cd ../../ echo "Installing Pip Requirements" pip3 install -r requirements.txt echo "Installing LibOpenJP2-Tools" if [ ""$EUID"" != 0 ]; then wsl sudo apt-get install libopenjp2-tools fi echo "Starting OpenEFT" echo 'export PATH="$PWD/build/bin:$PATH" > ~/.bashrc python3 openeft.py

What is this? https://github.com/ungoogled-software/ungoogled-chromium-windows Is this versions not at chromium.woolyss.com? It's not the Marmaduke version, which is at https://github.com/macchrome/winchrome Is that the version the Marmaduke build is based on (with some added features)?

In this case it looks like https://github.com/ungoogled-software/ungoogled-chromium-windows/releases/download/103.0.5060.134-1.1/ungoogled-chromium_103.0.5060.134-1.1_windows_x64.zip

I've found the github, but I've never built anything off of github before and while I'm sure I could figure it out if I have to, are there prebuilt versions or installers or anything I can use instead?

FWIW, I recently started building my own ungoogled chromium from here: https://github.com/ungoogled-software/ungoogled-chromium-win...

Someone might post a binary build there soon with 94 (until yesterday they only had the ancient 89), but you can build it yourself as well (on my 32-core 5950x with 64Gb RAM it took 2.5+ hours to build, just to be prepared for that).

Note that it won't have the Google Chrome Store, so the process for installing extensions (ahem, uBlock Origin) is a bit more involved: https://ungoogled-software.github.io/ungoogled-chromium-wiki...