7 ms·
> Word and JPEG are both examples of such "direct to memory" formats I think you mean Word and PSD, not JPEG - otherwise spot on.
by rogerhoward 11y ago
> Word and JPEG are both examples of such "direct to memory" formats
I think you mean Word and PSD, not JPEG - otherwise spot on.
- pjc50 11y agoJPEG exploit: https://www.f-secure.com/v-descs/ms04-028.shtml https://www.f-secure.com/v-descs/ms04-028.shtml
- rogerhoward 11y agoNot saying JPEG hasn't had its share of exploits, but that the format itself isn't an example (like DOC, and PSD) of a format that can be described as "direct to memory" in the same sense. DOC and PSD are in many ways just the in-memory data structures of the apps that create them, written to disk. http://www.joelonsoftware.com/items/2008/02/19.html http://www.joelonsoftware.com/items/2008/02/19.html "These are binary formats, so loading a record is usually a matter of just copying (blitting) a range of bytes from disk to memory, where you end up with a C data structure you can use. There’s no lexing or parsing involved in loading a file. Lexing and parsing are orders of magnitude slower than blitting." PSD is much the same - it's why interop with PSDs is such a challenge. JPEG has to be parsed and decompressed - another source of problems, but not remotely in the same category.