[grishka]

Using Java code for things that are this performance critical doesn't feel like a good idea. It will work of course, but it will probably GC a lot, and while modern JVMs do JIT, the code they generate can't be as optimal as something that has manual SIMD optimizations.

[lmm]

Using C code is how you get the next cloudbleed. I'm happy to pay a performance cost for the sake of memory safety.

[iomcr]

Fix this easily by abstracting the manipulation of user uploaded files to chroot/serverless.

[lmm]

That doesn't fix the problem. The process can still fix any data that it has access to, which includes other users' confidential uploaded files.