#font #untrusted #build #ots #tags #sh #sanitiser

servo/fontsan

Sanitiser for untrusted font files

4 releases

Uses old Rust 2015

0.3.2 Aug 22, 2016
0.3.1 Aug 21, 2016
0.3.0 Aug 21, 2016
0.2.0 Aug 19, 2016

#556 in Compression

7 stars & 12 watchers

BSD-3-Clause

2MB
34K SLoC

C 19K SLoC // 0.1% comments C++ 14K SLoC // 0.1% comments Rust 167 SLoC // 0.1% comments Shell 57 SLoC // 0.2% comments

fontsan

Build Status

A sanitiser for untrusted font files. Currently, this is just a wrapper around ots, which it builds a copy of.

To update:

  • check the appropriate upstream tag/commit of ots and its dependencies
  • edit the _TAG variables at the top of the src/deps/update_deps.sh script
  • $ bash src/deps/update_deps.sh
  • $ git add src/deps
  • Potentially adjust the build.rs to accommodate new and removed files from the dependencies
  • make cargo build and cargo test work
  • update the crate version number and the CHANGELOG.md

License of fontsan and dependencies

  • fontsan: BSD 3-clause license
  • ots: BSD 3-clause license
  • lz4: BSD 2-Clause license
  • brotli: MIT license
  • woff2: MIT license

Dependencies

~320–540KB
~11K SLoC