Re: [Full-Disclosure] avoid jpeg overflow problems using on the fly conversion?

2004-09-18 Thread Sascha Mettler
[EMAIL PROTECTED] wrote: On Fri, 17 Sep 2004 23:03:10 +1200, Nick FitzGerald said: nd, your suggestion does not say what to do with bad JPEGs -- it seems you assume the JPG to PNG convertor will necessarily and correctly deal with such invalid input. Do we really know that is a valid

[Full-Disclosure] avoid jpeg overflow problems using on the fly conversion?

2004-09-17 Thread mettlers
while discussing the jpeg overflow problem and remembering the similar bmp issue, one of my co-workers (thanks lars) brought up the idea of sanitizing jpgs on the gateway level. google found me no hints for existing stuff except a modified micro_proxy for converting png 2 jpg from 2001, when png

Re: [Full-Disclosure] avoid jpeg overflow problems using on the fly conversion?

2004-09-17 Thread William Warren
The only problem is this..there is no reason to sanitize jpeg's as this is not a jpeg issue but a Microsoft problem when dealing with jpeg's. Things that do not depend on the dll are not affected(mozilla/firefox and opera if i remember correctly). If this was a jpeg issue then everything

Re: [Full-Disclosure] avoid jpeg overflow problems using on the fly conversion?

2004-09-17 Thread Valdis . Kletnieks
On Fri, 17 Sep 2004 23:03:10 +1200, Nick FitzGerald said: And, your suggestion does not say what to do with bad JPEGs -- it seems you assume the JPG to PNG convertor will necessarily and correctly deal with such invalid input. Do we really know that is a valid assumption? There's also