research

Hoyt's Research Repo is a public-domain security research collection centered on ICC color profiles, image rendering, and user-agent abuse. It is a research and tooling repository rather than a finished end-user application. Scope and contents - ICC color profile security research: the repo tracks ongoing work on parsing and rendering color profiles, with test images and profiles published so developers can reproduce and identify bugs. - Fuzzing campaigns: AFL and CFL campaigns are ongoing; patches are developed in this repository and then upstreamed. - Valgrind and Helgrind: a `valgrind/` directory builds a separate non-sanitized Debug iccDEV tree, with local and container runners covering Memcheck, Helgrind, DRD, Massif, and Callgrind. - LUT Dumper: LUT dumping code is noted as intended for upstreaming. - Color Bleed Tooling: available through the repository's Releases. - Test profiles: sample images and ICC profiles are provided to help developers find defects. Upstream relationship The retired `iccAnalyzer-lite` and standalone server work is now represented upstream in `InternationalColorConsortium/iccDEV` through `iccPawgReport` (a PAWG security, conformance, and quality report CLI), `iccdev-mcp` (an MCP and REST server exposing supported iccDEV tools), and a unified published container image containing CLI tools, the MCP server, maintainer utilities, and test profiles. `docs/ICCDEV_UPSTREAM_INTEROP.md` is the reference for current source, container, MCP, and maintainer validation; dead analyzer commands and release gates have been removed from active documentation. How to engage Issues can be opened for questions, comments, or concerns. The repository is updated periodically, with the README noting a last update of 2026-08-28.