Download
Wuffs is a memory-safe, zero-dependency library and domain-specific language for writing high-performance image codecs and related parsers. Instead of trusting ad-hoc C, Wuffs code is compiled to C with strong bounds, integer, and state checks inserted by construction, aiming to eliminate whole classes of security bugs without a heavy runtime. The design prioritizes predictable performance: decoders avoid dynamic allocation by default, return explicit “short read” signals, and run well in streaming or sandbox-free environments. The project ships battle-tested, CPU-friendly implementations for common image/container formats and bit-twiddly primitives like Huffman and checksum routines. Its standard library emphasizes portability and constant-time behavior where appropriate, which is valuable in security-sensitive contexts. Because the language is purpose-built, the resulting C output is small, auditable, and easy to embed in larger systems.
Features
- Memory-safe-by-construction code that compiles to portable C
- Zero external dependencies and predictable, streaming-friendly APIs
- Fast primitives for bit I/O, checksums, and entropy coding
- Decoder designs that avoid dynamic allocation by default
- Strong static checks for bounds, integer overflow, and state machines
- Small, auditable outputs suited to sandbox-free deployments
Project Samples
