Definition
Plain language
The standard free software library for reading and writing PNG image files.
As stated in the literature
A widely used C library for the PNG image format; its parsing code is a recurring source of memory-safety bugs, and in the SAILOR work specific bugs required particular chunk-type and bit-depth combinations that random fuzzing rarely reconstructs.
Why it matters: Because so much software loads images through it, a memory bug here can expose many programs, and triggering such bugs requires specific image settings that ordinary random testing rarely stumbles on.
For example, when an app opens a PNG photo, it often relies on libpng to decode the image's pixels.
Heard on the show
“… libpng — twenty-one, in a library that's only sixty-three thousand lines long, and notably, the libpng bugs …”Episode 014 — Why a Constrained Pipeline Beat a Full Coding Agent at Finding Bugs 30-to-1