No description
Find a file
sideshowbarker 9d64cd8c9b LibGfx: Reject the Invalid bitmap format from IPC decoders
Problem: A borked process sending a Gfx::Bitmap (inside BitmapSequence)
or a Gfx::ShareableBitmap over IPC could set BitmapFormat::Invalid as
the format field. The receiving process then aborted while decoding the
message — an IPC-reachable crash.

Cause: The helper that both decoders use for validating the format read
off the wire accepts BitmapFormat::Invalid. The decoders go on to build
a bitmap with that format. But that triggers an assert — because
minimum_pitch only knows the four real pixel formats.

Fix: Drop BitmapFormat::Invalid from is_valid_bitmap_format. It’s an
indicator of an absent/unknown format, never one a real bitmap can have.
And any real bitmap is never encoded with it. So, both BitmapSequence
and ShareableBitmap decode now return a clean decode error for it.
2026-06-19 10:33:36 +02:00
.devcontainer Documentation: List ncurses as a build dependency 2026-06-07 12:05:42 +12:00
.github CI: Bump actions/checkout from 6.0.3 to 7.0.0 2026-06-19 09:52:09 +02:00
AK LibJS: Remove JS_BYTECODE_DEBUG 2026-06-14 20:27:59 +02:00
Base/res LibWeb+LibWebView+WebContent: Allow muted media to autoplay by default 2026-06-19 09:41:32 +02:00
Documentation AK: Remove SANITIZE_PTRS support 2026-06-13 22:49:15 +02:00
Libraries LibGfx: Reject the Invalid bitmap format from IPC decoders 2026-06-19 10:33:36 +02:00
Meta LibWeb: Implement CSS progress() math function 2026-06-19 09:33:06 +01:00
Services LibWeb+LibWebView+WebContent: Allow muted media to autoplay by default 2026-06-19 09:41:32 +02:00
Tests LibGfx: Reject the Invalid bitmap format from IPC decoders 2026-06-19 10:33:36 +02:00
UI LibWeb+LibWebView+WebContent: Allow muted media to autoplay by default 2026-06-19 09:41:32 +02:00
Utilities LibWeb+WebContent+WebWorker: Drop display list player type selection 2026-06-18 10:25:44 +02:00
.clang-format Meta: Enforce newlines around namespaces 2025-05-14 02:01:59 -06:00
.clang-tidy Meta: Disable clang-tidy's const correctness checks 2025-07-08 11:04:15 -04:00
.clangd Meta: Enable angled brackets in clangd 2026-03-20 19:32:14 +01:00
.editorconfig Meta: Add .editorconfig 2022-09-10 17:32:55 +01:00
.gdbinit Meta: Restore serenity_gdb.py 2026-05-28 14:33:25 +01:00
.gitattributes LibGfx: Remove support for the various "portable" image formats 2024-06-17 21:57:35 +02:00
.gitignore Meta: Ignore log files 2026-04-23 13:50:01 -04:00
.lldbinit Meta: Add lldb pretty printers for AK types 2026-05-28 11:55:24 +01:00
.mailmap Meta: Update my e-mail address everywhere 2024-10-04 13:19:50 +02:00
.pre-commit-config.yaml Meta: Replace deprecated pre-commit stage name 2024-10-18 09:40:59 +02:00
.prettierignore Tests: Exclude JS AST and bytecode tests from prettier checks 2026-02-19 02:45:37 +01:00
.prettierrc Meta: Increase the line length enforced by prettier to 120 2025-10-31 19:55:50 -04:00
.ycm_extra_conf.py Meta: Sort all python imports 2025-06-09 11:25:14 -04:00
Cargo.lock LibURL: Implement URLPattern in Rust 2026-05-28 09:27:41 +02:00
Cargo.toml LibURL: Implement a URL parser in rust 2026-05-28 09:27:41 +02:00
CMakeLists.txt Meta: Hoist the Fuzzers directory up one level 2026-06-13 10:30:02 -04:00
CMakePresets.json CMake+CI: Use the same preset names on every platform 2026-01-17 12:18:46 -07:00
CODE_OF_CONDUCT.md Meta: Add code of conduct (from the Ruby community) 2024-10-02 09:49:52 +02:00
CONTRIBUTING.md Everywhere: Update contribution guidelines 2026-06-05 10:20:15 +02:00
ISSUES.md Everywhere: Document use of ladybird.py over ladybird.sh 2025-05-29 16:24:17 -04:00
LICENSE Meta: Update LICENSE copyright year 2026-06-07 21:11:24 +02:00
pyproject.toml Tests/LibWeb: Run imported WPT handlers in HTTP test server 2026-06-06 13:48:43 +02:00
README.md Everywhere: Update contribution guidelines 2026-06-05 10:20:15 +02:00
rust-toolchain.toml Meta: Revert to a stable rust compiler 2026-06-02 20:12:41 +02:00
rustfmt.toml Meta: Revert to a stable rust compiler 2026-06-02 20:12:41 +02:00
SECURITY.md Documentation: Make updates to align better with new issue template 2024-10-31 09:18:08 +01:00
vcpkg-configuration.json Meta: Add overlay port for vulkan-loader 2024-07-07 15:56:59 +02:00
vcpkg.json Meta: Update ICU to 78.3 by bumping the vcpkg baseline 2026-06-19 08:59:16 +02:00

Ladybird

Ladybird is a truly independent web browser, using a novel engine based on web standards.

Important

Ladybird is in a pre-alpha state, and only suitable for use by developers

Features

We aim to build a complete, usable browser for the modern web.

Ladybird uses a multi-process architecture with a main UI process, several WebContent renderer processes, an ImageDecoder process, and a RequestServer process.

Image decoding and network connections are done out of process to be more robust against malicious content. Each tab has its own renderer process, which is sandboxed from the rest of the system.

At the moment, many core library support components are inherited from SerenityOS:

  • LibWeb: Web rendering engine
  • LibJS: JavaScript engine
  • LibWasm: WebAssembly implementation
  • LibCrypto/LibTLS: Cryptography primitives and Transport Layer Security
  • LibHTTP: HTTP/1.1 client
  • LibGfx: 2D Graphics Library, Image Decoding and Rendering
  • LibUnicode: Unicode and locale support
  • LibMedia: Audio and video playback
  • LibCore: Event loop, OS abstraction layer
  • LibIPC: Inter-process communication

How do I build and run this?

See build instructions for information on how to build Ladybird.

Ladybird runs on Linux, macOS, Windows (with WSL2), and many other *Nixes.

How do I read the documentation?

Code-related documentation can be found in the documentation folder.

Get in touch and participate!

Join our Discord server to participate in issue and development discussions.

Please read Getting involved with Ladybird if you're new to Ladybird and want to help.

Before opening an issue, please see the issue policy and the detailed issue-reporting guidelines.

The project participation guidelines can be found in CONTRIBUTING.md.

License

Ladybird is licensed under a 2-clause BSD license.