khaledhosny/ots
View on GitHub ↗ ★ 314 C++
Sanitizer for OpenType
5 mentions on Hacker News by 4 people: 1 story, 4 comments · first 2015-06-24 · latest 2016-08-29
20082026
-
…might since it's just a Chromium fork and OTS[1] is a part of the WTF (webkit tools framework). [1] https://github.com/khaledhosny/ots
comment by ryuuchin · 2016-06-30 · in A year of Windows kernel font fuzzing #1: the results -
…also be used in Edge/IE although I've no idea if they do (or if they rolled their own even). [1] https://github.com/khaledhosny/ots
comment by ryuuchin · 2016-06-30 · in A year of Windows kernel font fuzzing #1: the results -
…pass web fonts through OTS [1] before rendering them, so hopefully that mitigates the threat. [1] https://github.com/khaledhosny/ots
comment by madmoose · 2015-07-20 · in Vulnerability in Microsoft Font Driver Could Allow Remote Code Execution -
Chrome and Firefox require all web fonts to pass the OpenType Sanitiser https://github.com/khaledhosny/ots
comment by jahewson · 2015-06-24 · in Results of recent PostScript CharString security research