You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
mastodon/lib
Pierre Bourdon 36bc90e8aa
blurhash_transcoder: prevent out-of-bound reads with <8bpp images (#20388)
The Blurhash library used by Mastodon requires an input encoded as 24
bits raw RGB data. The conversion to raw RGB using Imagemagick did not
previously specify the desired bit depth. In some situations, this leads
Imagemagick to output in a pixel format using less bpp than expected.
This then manifested as segfaults of the Sidekiq process due to
out-of-bounds read, or potentially a (highly noisy) memory infoleak.

Fixes #19235.
2 years ago
..
active_record Remove dependency on pluck_each gem (#16012) 4 years ago
assets png optimization(loss less) (#19630) 2 years ago
chewy/strategy Change search indexing to use batches to minimize resource usage (#18451) 3 years ago
devise Fix authentication before 2FA challenge (#11943) 5 years ago
generators Add post-deployment migration system (#8182) 7 years ago
json_ld Fixed code quality issues (#15541) 4 years ago
mastodon Bump version to 4.0.0rc2 (#19831) 2 years ago
paperclip blurhash_transcoder: prevent out-of-bound reads with <8bpp images (#20388) 2 years ago
rails Fix obsolete digitalocean.rake file breaking rake tasks (#15618) 4 years ago
redis Change Redis#exists calls to Redis#exists? to avoid deprecation warning (#14191) 5 years ago
sanitize_ext Prepare Mastodon for zeitwerk autoloader (#15917) 4 years ago
simple_navigation Add customizable user roles (#18641) 3 years ago
tasks Fix `ENV` (#20377) 2 years ago
templates Add post-deployment migration system (#8182) 7 years ago
terrapin Add Ruby 3.0 support (#16046) 4 years ago
webpacker Add subresource integrity for JS and CSS assets (#15096) 4 years ago
cli.rb Add ability for admins to delete canonical email blocks (#16644) 3 years ago
enumerable.rb Optimize map { ... }.compact calls (#15513) 4 years ago
exceptions.rb Improve error reporting and logging when processing remote accounts (#15605) 2 years ago