<story><title>Bad Apple Font</title><url>https://blog.erk.dev/posts/anifont/</url></story><parent_chain><item><author>triclops200</author><text>Obviously the thought comes up of the fact that this feels unsafe to have WASM in font files, but, I&amp;#x27;m also aware that font layout engines are already turing complete, which leads me to wonder: have there been any high profile malware font examples? That entire stack feels a lot like an attack surface to me, especially given stuff like the fact that windows used to render fonts in the kernel layer.</text></item></parent_chain><comment><author>saurik</author><text>Multiple iOS jailbreaks--both by comex--were buffer overflows of the virtual machine stack due to bugs in how a few instructions were handled in freetype&amp;#x27;s implementation of true type font hinting. The resulting exploit was embedded in a PDF file (which was itself deployed by a website), but that was just a convenient way to embed the font and trigger very deterministic hinting: the bug wasn&amp;#x27;t in the PDF renderer, per se (though I imagine a lot of people were confused on that front in the popular press about the issue).&lt;p&gt;He open sourced the exploit concurrent to the website going up, and it was immediately adjusted for use against different targets (including FoxIt reader or something like that on Windows), and as freetype was used by a lot of Linux distributions in addition to iOS I imagine it was used in a ton of malware (which might or might not have been &amp;quot;high profile&amp;quot;). I actually use those vulnerabilities as a case study in the ethical trade offs of open source weaponization in my talks.&lt;p&gt;(There were two such jailbreaks, as there were&amp;#x2F;are separate implementations of two similar yet slightly different virtual machine versions, each of which had bugs that I remember to be related to the same fundamental mistake; and--as you can read about in another big thread on this website today, most developers think coming up with difficult abstractions isn&amp;#x27;t worth their effort and would rather fix things by playing whack-a-mole.)</text></comment>
<story><title>Bad Apple Font</title><url>https://blog.erk.dev/posts/anifont/</url></story><parent_chain><item><author>triclops200</author><text>Obviously the thought comes up of the fact that this feels unsafe to have WASM in font files, but, I&amp;#x27;m also aware that font layout engines are already turing complete, which leads me to wonder: have there been any high profile malware font examples? That entire stack feels a lot like an attack surface to me, especially given stuff like the fact that windows used to render fonts in the kernel layer.</text></item></parent_chain><comment><author>LukeShu</author><text>Font layout engines are only Turing-complete if the stack is unbounded (to be fair: that&amp;#x27;s true actual computers too: they&amp;#x27;re not Turing-complete because they don&amp;#x27;t have infinite RAM), and AFAIK the major font engines all impose a quite strict limit on the stack size.</text></comment>