[XL] Change in coreboot[main]: lib/jpeg: Replace decoder with Wuffs' implementation

[Nigel Tao (Code Review)]

Attention is currently required from: Martin L Roth, Patrick Georgi, Tim Wawrzynczak.

Nigel Tao has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/78271?usp=email )

Change subject: lib/jpeg: Replace decoder with Wuffs' implementation
......................................................................

Patch Set 2:

(1 comment)

Commit Message:

https://review.coreboot.org/c/coreboot/+/78271/comment/a8a9eec3_c81d7255 :
PS2, Line 28: inputs. No crashes or anything though, which is a notable improvement
You might want to impose some image/buffer length constraints in your fuzzer.

Wuffs' JPEG fuzzer uses "buffer size in bytes" constraints, at 64 MiB max for both work buffer and pixel buffer:

https://github.com/google/wuffs/blob/3eb4e3a6aa4bb41bde2c38dafbe650b252281ba...

https://github.com/google/wuffs/blob/3eb4e3a6aa4bb41bde2c38dafbe650b252281ba...

Coreboot's fuzzer could do something similar (in terms of buffer sizes) and/or constrain the image width and height in pixels.