On Tue, Sep 4, 2018, 6:19 PM Magnus Bergman <magnus.berg...@snisurset.net>

> Over the years it has been discussed from time to time to replace
> gdk-pixbuf with something else[1][2].


> I finally took some time to design an
> image loading library on top of cairo


>  abydos, which at least
> suits my needs. And also some needs mentioned in this list over the
> years. First I thought it could suit the needs of GTK+ as well.

So one thing i think a modern image library needs is sandboxing.  the
loader should be contained with bubblewrap and it should just give back a
chunk of pixels in shared memory as a memfd or similar.

then if it crashes it doesnt take down the app.  if its exploited the most
the attacker can do is make the caller show the wrong image (which could
still be bad of course)

gtk-devel-list mailing list

Reply via email to