Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Aside from potential vulnerabilities (bugs), no. Font formats are declarative. The various tables that define conditionals et al have no ability to run arbitrary code, and certainly do not have any concept of scripting and the like.


Ttf has bytecode for a stack interpreter with conditionals and loops (jump instructions and loop all). That’s declarative in the sense that all code is data, but i would say it is imperative.


Yes but it is a strict set of very limited codes, nothing which gains access to the machine a la syscalls.



First line says "except vulnerabilities".




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: