rav2d: We ported an AV2 video decoder from C to Rust — here's why

Video decoders parse untrusted bitstreams from the internet — they are a prime target for memory corruption exploits. Historical CVEs in video decoders (libvpx, dav1d, ffmpeg) are overwhelmingly buffer overflows, use-after-free, and integer overflows in C parsing code.

We completed rav2d — a full Rust port of strategy (AV1 Rust port, funded by Prossimo/ISRG):

1. FFI bindings to dav2d's hand-optimized assembly


2. Progressive C-to-Rust port of the core decoder


3. Conformance testing at every step

Repo: github.com/stukenov/rav2d

BSD 2-Clause license.