google/wuffs

Features

• Safe Parser Generators - A tool that compiles a domain-specific language into a C library for safely decoding untrusted file formats.
• Memory-Safe Parser Generators - Functions as a compiler that transforms domain-specific specifications into memory-safe C libraries for decoding untrusted formats.
• Safe Implementations - Provides safe implementations for decoding and encoding formats including JPEG, PNG, GIF, Gzip, and Zlib.
• Image Format Decoders - A capability to parse and extract pixel data from file types like JPEG, PNG, and GIF into usable representations.
• Hermetic Execution Environments - Implements a sandboxed execution model that prohibits system calls and manual memory management to ensure computations are side-effect free.
• Decompression Implementations - A standardized interface for decompressing file formats and streams to recover original data from compressed sources.
• Hermetic Library Compilers - Generates hermetic C code that prohibits system calls and manual memory management to ensure execution safety.
• Overflow-Proof Compiler Passes - Eliminates buffer and arithmetic integer overflows at compile time to ensure safe processing without runtime overhead.
• Domain Specific Languages - Employs a domain-specific language to define the logic for memory-safe data processing and parsing.
• Refined Type Systems - Utilizes a refined type system with non-null pointers and fixed-size arrays to ensure memory safety.
• Configuration to C Transpilation - Translates a domain-specific language into C source code to generate memory-safe parsing libraries.
• Safe Binary Parsing - Implements strict bounds and memory safety to prevent overflows when decoding untrusted binary data streams.
• Scratch-Space Work Buffers - Uses a dedicated scratch space for temporary memory to avoid dynamic allocation during data processing.
• Structured Data Parsers - A capability to process serialized formats like JSON and CBOR to extract organized information from raw byte streams.
• Image Format Encoding - A feature to transform raw data into specific file formats such as JPEG, PNG, and Deflate for storage or transmission.
• Compile-Time Correctness Verification - Uses a refined type system and formal rules during compilation to prove the absence of safety vulnerabilities.
• Bzip2 Decompressions - A specific implementation for decompressing data encoded with the Bzip2 compression format.
• Gzip Decompression - A process that decompresses Gzip files by combining Deflate decompression with CRC-32 checksum verification.
• Deflate Decompression - A capability to decompress data using the Deflate algorithm with options for optimized initialization speed.
• Zlib Decompressions - A process that decompresses Zlib streams by combining Deflate decompression with Adler-32 checksum verification.
• LZW Decompressions - A utility to decompress data encoded using the Lempel-Ziv-Welch algorithm by transforming input streams into expanded output.
• Saturation Arithmetic - Implements saturating arithmetic to prevent numerical overflows during data processing.
• Hermetic Function Definitions - Defines hermetic functions that only modify local state to ensure the global system state remains unchanged.
• Range Constraints - Restricts basic types to specific subsets of their natural range to ensure values stay within predefined bounds.
• Single-File Libraries - Produces self-contained C source files to eliminate external dependencies and simplify integration.
• Coroutine-Based State Management - Uses coroutines to suspend and resume execution, enabling the processing of fragmented or asynchronous data streams.
• Purity Annotations - Uses effect markers to distinguish pure operations from state-modifying functions or coroutines.
• Multi-Target Code Generation - A feature that translates a domain-specific language into executable code for other target environments such as Go or Rust.
• Binary Data Processing - Processes byte arrays and slices using explicit endianness to validate file signatures safely.

Star history