Commit graph

96 commits

Author SHA1 Message Date
adam
65d52848f6 jasper: fix for opengl option 2023-04-11 18:22:14 +00:00
adam
f69b23bbf5 jasper: updated to 4.0.0
4.0.0 (2022-11-05)

Improve static linking
Fix path relocation in mingw environment
Improve logging and build scripts.
Improve JPEG-2000 conformance test results.
Enable PIC by default.
Fix memory leaks in function cmdopts_parse
imgcmp:
  Add quiet (-q) option.
  Add debug-level option.
  Fix memory leak.
imginfo:
  Add quiet (-q) option.
Fix bug in parsing PGX header.
Fix integer overflow bug
2023-04-11 05:43:24 +00:00
wiz
a2e1a35a28 *: convert to cmake/build.mk 2023-01-24 18:36:17 +00:00
gutteridge
1e4ca2627d Bump all dependent packages of wayland (belatedly)
The package changed with the addition of its libepoll-shim dependency.
Otherwise, we can get:
ERROR: libepoll-shim>=0.0.20210418 is not installed; can't buildlink files.
2022-08-11 05:08:00 +00:00
adam
b6d9bd86bc revbump for icu and libffi 2021-12-08 16:01:42 +00:00
nia
f8331b5844 graphics: Replace RMD160 checksums with BLAKE2s checksums
All checksums have been double-checked against existing RMD160 and
SHA512 hashes
2021-10-26 10:45:53 +00:00
nia
84d3786e88 graphics: Remove SHA1 hashes for distfiles 2021-10-07 14:11:55 +00:00
adam
7bb3edfcc1 jasper: updated to 2.0.33
2.0.33 (2021-08-01)
Fix a JP2/JPC decoder bug.
Fix a build issue impacting some platforms.
2021-08-02 05:55:10 +00:00
nia
c152116e9b jasper: update to 2.0.32
2.0.32 (2021-04-18)
===================

* Test release performed with GitHub Actions.

2.0.29 (2021-04-16)
===================

* Loosen some overly tight restrictions on JP2 codestreams, which caused
  some valid codestreams to be rejected. (#289)
2021-04-19 10:59:23 +00:00
adam
12f63a5d8a jasper: updated to 2.0.28
2.0.28
* Fix potential null pointer dereference in the JP2/JPC decoder.
* Fix ignoring of JAS_STREAM_FILEOBJ_NOCLOSE at stream close time.
* Fix integral type sizing problem in JP2 codec.
2021-03-30 09:28:35 +00:00
adam
fffe1d5a2f jasper: updated to 2.0.27
2.0.27

Check for an image containing no samples in the PGX decoder.
Check for dimensions of zero in the JPC and JPEG decoders.
Fix an arguably incorrect type for an integer literal in the PGX decoder.
Check for an invalid component reference in the JP2 decoder.
Check on integer size in JP2 decoder.
2021-03-19 07:04:11 +00:00
adam
d32a92e0f4 jasper: updated to 2.0.26
2.0.26
* Fix JP2 decoder bug that can cause a null pointer dereference for
  some invalid CDEF boxes.
2021-03-05 18:53:56 +00:00
nia
ba71db550b jasper: Update to 2.0.25
2.0.25 (2021-02-07)
===================

* Fix memory-related bugs in the JPEG-2000 codec resulting from
  attempting to decode invalid code streams. (#264, #265)
2021-02-10 10:01:31 +00:00
adam
11244ff867 jasper: updated to 2.0.24
2.0.24:
Add JAS_VERSION_MAJOR, JAS_VERSION_MINOR, JAS_VERSION_PATCH for easier access to the JasPer version.
Fixes stack overflow bug on Windows, where variable-length arrays are not available
2021-01-06 12:22:52 +00:00
adam
e89f521d91 jasper: updated to 2.0.23
2.0.23:
Fix CVE-2020-27828, heap-overflow in cp_create() in jpc_enc.c
2020-12-08 14:36:51 +00:00
adam
5a4185bf12 jasper: updated to 2.0.22
2.0.22:
* Update manual
* Remove JPEG dummy codec. Jasper needs libjpeg for JPEG support
* Fix test suite build failure regarding disabled MIF codec
* Fix OpenGL/glut detection
2020-11-12 11:18:33 +00:00
adam
3c69023247 jasper: updated to 2.0.21
2.0.21:
Unknown changes
2020-09-29 16:50:15 +00:00
adam
14731c87d6 jasper: updated to 2.0.20
2.0.20

* fixed several ISO/IEC 15444-4 conformance bugs

* fixed new variant of CVE-2016-9398

* disabled the MIF codec by default for security reasons (but it is still
  included in the library);
  in a future release, the MIF codec may also be excluded from the
  library by default

* added documentation for the I/O streams library API
2020-09-14 17:47:13 +00:00
wiz
dd4a16ecee jasper: restore patch 2020-07-29 07:26:41 +00:00
wiz
fdd034de09 jasper: remove patch to reset keyword substitution 2020-07-29 07:26:23 +00:00
adam
441cd11c43 jasper: updated to 2.0.19
version-2.0.19

Unfortunately 2.0.17 was released on a branch. Later the branch was
removed and the 2.0.17 tag was placed on another commit and branch.

This resulted in various distros who pulled the tarball at different
times two have different jasper versions for 2.0.17.

https://repology.org/project/jasper/versions shows that some even have a
2.0.18.

To reduce all this confusion I will release 2.0.19 now.
With a clean changelog referencing what @MaxKellermann and @jubalh (me)
did on our fork at jasper-maint.

If we want to revert things later or improve the changelog this can be
easily done on master ontop of this.
But I feel we need this release to reduce the confusion and put the
project on a clear track again.
2020-07-29 07:03:59 +00:00
otis
e7cdc3aff2 jasper: Fix version to 2.0.17
The actual latest version is 2.0.17. "Unknown changes" still applies.

Released: 21.7.2020
2020-07-23 18:39:06 +00:00
adam
57f8c132c7 jasper: updated to 2.0.18
2.0.18:
Unknown changes.
2020-07-21 07:31:28 +00:00
rillig
87f1ebdf77 graphics/jasper: fix typo in jasper.pc.in location 2020-04-26 10:05:46 +00:00
nia
b3c000b470 jasper: Update to 2.0.16
CVE-2018-19539: Fixed a denial of service in jas_image_readcmpt
2019-07-16 10:06:07 +00:00
snj
733aaedcdf graphics/jasper: update to 2.0.14.
Changes:
- In the JPC codec, the requirement that the number of tile parts be at
  least one has been removed (since the JPEG-2000 standard allows
  a special value of zero to mean the number of tile parts is unspecified).
- add option to disable programs
- Include jasper/jas_debug.h when using jas_eprintf
  Fixes building with -Werror=implicit-function-declaration.
- Applied patches to resolve some missing export problems.
  See: https://github.com/mdadams/jasper/issues/122
- Moved inttypes.h and stdbool.h includes to jas_types.h and fixed
  the build for Visual Studio 2012 and lower.
- Correct or add comments for jas_safe_* functions
  Mostly fixing bad copy-n-paste issues, or functions added without any
  comment.
- Added a check in the JP2 encoder to ensure that the image to be coded
  has at least one component.  Also, made some small changes to a
  private build script.
- Fixed bugs due to uninitialized data in the JP2 decoder.
  Also, added some comments marking I/O stream interfaces that probably
  need to be changed (in the long term) to fix integer overflow
  problems.
- Added some additional checking to prevent a potential integer overflow
  due to conversion in the JPC decoder.
- Added numerous more-detailed error messages for the JPC and JP2
  codecs.
- Added a partial verbose capability for the run_test_1 script.
- Moved a test case from the bad category to the good category, as the
  test case had been miscategorized.
- Add some regression test cases.
- Fixed some potential double-free problems in the JPC codec.
2017-11-23 19:16:28 +00:00
wiz
79101955a0 Updated jasper to 2.0.12.
Bumped the version number.

    Added some additional checking to prevent a potential integer overflow
    due to conversion in the JPC decoder.

    Added numerous more-detailed error messages for the JPC and JP2
    codecs.
    Added a partial verbose capability for the run_test_1 script.
    Moved a test case from the bad category to the good category, as the
    test case had been miscategorized.


    Added another regression test case.

    Fixed some potential double-free problems in the JPC codec.
2017-03-05 12:49:51 +00:00
ryoon
fd4ad6652d Disable PDF files regeneration from disabling doxygen detection.
And install pre-generated PDF files.
Bump PKGREVISION.
Thank you, adam@.
2017-02-22 11:53:49 +00:00
ryoon
ab2cc25d1a Disable documentation files generation. Bump PKGREVISION
When LaTeX is detected, some LaTeX style files are required.
2017-02-22 00:45:06 +00:00
adam
c838c81330 Changes 2.0.10:
Fixed a problem in the JP2 encoder that caused a null pointer dereference when no ICC profile data is available (e.g., in the case of an unknown color space).
2017-02-21 18:24:20 +00:00
dholland
2836d9f7c2 Insert rcsid header in patch file, which I dropped in almost verbatim
from upstream.
2016-12-17 23:10:25 +00:00
dholland
c06bd15b53 Add upstream patch for CVE-2016-8654. 2016-12-17 23:02:51 +00:00
he
29b588919e Add a cast so that this builds with the compiler in NetBSD 7.0 as well. 2016-12-16 13:05:58 +00:00
he
d19ab5bfab Upgrade jasper from 1.900.1 to 1.900.29.
This integrates most of the patches we had applied in pkgsrc.

The changes are in ChangeLog, and are not well summarized anywhere
I can find, sorry...

OK from adam@
2016-12-16 09:44:44 +00:00
he
06d2094ae5 Add fixes for CVE-2008-3520 and CVE-2008-3522, patches from
https://bugs.gentoo.org/show_bug.cgi?id=222819

Bump PKGREVISION.
2016-05-16 14:03:40 +00:00
tnn
2f507c2c79 patch denial of service issues CVE-2016-1577 CVE-2016-2116 CVE-2016-2089
via debian
2016-03-13 04:11:18 +00:00
jperkin
ec1cd47ca0 Remove manual OPSYSVARS additions which are now part of the default set. 2016-02-25 08:27:02 +00:00
agc
7f810a359f Add SHA512 digests for distfiles for graphics category
Problems found with existing digests:
	Package fotoxx distfile fotoxx-14.03.1.tar.gz
	ac2033f87de2c23941261f7c50160cddf872c110 [recorded]
	118e98a8cc0414676b3c4d37b8df407c28a1407c [calculated]
	Package ploticus-examples distfile ploticus-2.00/plnode200.tar.gz
	34274a03d0c41fae5690633663e3d4114b9d7a6d [recorded]
	da39a3ee5e6b4b0d3255bfef95601890afd80709 [calculated]

Problems found locating distfiles:
	Package AfterShotPro: missing distfile AfterShotPro-1.1.0.30/AfterShotPro_i386.deb
	Package pgraf: missing distfile pgraf-20010131.tar.gz
	Package qvplay: missing distfile qvplay-0.95.tar.gz

Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden).  All existing
SHA1 digests retained for now as an audit trail.
2015-11-03 21:33:50 +00:00
snj
2408c34540 Fix CVE-2014-8157 and CVE-2014-8158. Bump PKGREVISION to 10. 2015-02-08 23:04:22 +00:00
he
3d860f3f2d Rename patches to conform to the "new" style.
Add comments to the patches.
Add fix for oCERT-2014-012, pulled from RedHat.
Add fix from Debian bug 469786.
Add LICENSE setting, I think modified-bsd is fitting.
Bump PKGREVISION.
2015-01-01 14:15:27 +00:00
tez
424256685d Add patch for CVE-2014-9029 from
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-9029
2014-12-11 20:18:09 +00:00
wiz
cda18437be Remove pkgviews: don't set PKG_INSTALLATION_TYPES in Makefiles. 2014-10-09 14:05:50 +00:00
adam
f4c3b89da7 Revbump after graphics/jpeg and textproc/icu 2013-01-26 21:36:13 +00:00
asau
08f35c7155 Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days. 2012-10-06 14:10:39 +00:00
drochner
ee7a1eb849 add patches from Redhat to add some input validation and fix a
memory allocation error; both could lead to heap buffer overflows
(CVE-2011-4516, CVE-2011-4517)
bump PKGREV
2011-12-22 16:17:57 +00:00
tez
c2af97fcfa The solaris stdbool.h requires c99 which is fine for jasper, but
not so good for things that depend upon jasper.  See PR#43901
This stops jasper from using stdbool.h (on solaris only.)
2011-06-21 16:20:51 +00:00
dsainty
1f40f3a084 Mechanically replace references to graphics/jpeg with the suitable
alternative from mk/jpeg.buildlink3.mk

This allows selection of an alternative jpeg library (namely the x86 MMX,
SSE, SSE2 accelerated libjpeg-turbo) via JPEG_DEFAULT=libjpeg-turbo, and
follows the current standard model for alternatives (fam, motif, fuse etc).

The mechanical edits were applied via the following script:

#!/bin/sh
for d in */*; do
  [ -d "$d" ] || continue
  for i in "$d/"Makefile* "$d/"*.mk; do
    case "$i" in *.orig|*"*"*) continue;; esac
    out="$d/x"
    sed -e 's;graphics/jpeg/buildlink3\.mk;mk/jpeg.buildlink3.mk;g' \
        -e 's;BUILDLINK_PREFIX\.jpeg;JPEGBASE;g' \
        < "$i" > "$out"
    if cmp -s "$i" "$out"; then
      rm -f "$out"
    else
      echo "Edited $i"
      mv -f "$i" "$i.orig" && mv "$out" "$i"
    fi
  done
done
2010-12-23 11:44:24 +00:00
wiz
91871f449e Second try at jpeg-8 recursive PKGREVISION bump. 2010-01-18 09:58:37 +00:00
drochner
b0d0bad074 add a patch from Debian to tolerate j2k pictures with alpha channel
(seems really just tolerated -- looks ugly but at least doesn't crash)
bump PKGREVISION
2009-11-23 11:53:20 +00:00
sno
6f7368d4db bump revision because of graphics/jpeg update 2009-08-26 19:56:37 +00:00