plus gcc6 fix to dcraw_common.cpp
LibRaw 0.17.2
* strncpy usage was not compatible with glibc bounds check
LibRaw 0.17.1
* fixed two errors found by AlphaFuzzer
* phase_one_correct always returns value; handle P1 return codes in
postprocessing
LibRaw 0.17.0
* Fixed dcraw.c ljpeg_start possibly buffer overrun
* fixed several bugs detected by using American Fuzzy Lop
* C-API extension to support 3DLut Creator
* More metadata parsing/extraction:
XMP packet extracted (if exists)
DNG Color information parsed
GPS data (partially) parsed
EXIF/Makernotes parsed for used optics (for both RAW files and DNG
converted by Adobe convertor).
* Exif/Makernotes parser callback (called for each processed tag)
* Sony ARW2.3 decoder:
params.sony_arw2_hack removed, decoded data are always in 0...17k range
(note the difference with dcraw!)
Additional processing options for Sony lossy compression techincal
analysis.
* Dcraw 9.26 imported (but some changes not approved because Libraw do it
better) with some exceptions:
no Pentax K3-II frame selection code
no built-in JPEG decompressor
* Many improvements in data decoding/processing:
Correct decoding of black level values from metadata for many formats,
LibRaw do not rely on hardcoded black levels.
* 224 camera models added to supported camera list. Some of them are new
(released since LibRaw 0.16 come out), some was supported before, but
missed from the list.
* Fujifilm F700/S20Pro second frame support
-------------
* Upgraded libpng to version 1.6.21.
! Fixed an assertion failure in the image reduction code.
!! Fixed various security-sensitive defects in the BMP decoder.
! Fixed a benign uninitialized memory read in the GIF decoder.
! Fixed a build failure occurring under the Estonian (et_EE) locale.
! Fixed a build failure occurring on Mac OS X, FreeBSD, and possibly
other systems that lack POSIX-compliant high-resolution timestamps.
! Fixed a typo causing build failures in 32-bit ANSI C compilation.
Updated graphics/tex-animate{,-doc} to 20160415
Updated graphics/tex-bclogo{,-doc} to 3.1
Updated graphics/tex-mcf2graph{,-doc} to 3.92
Updated graphics/tex-mptopdf{,-doc} to 2016
Updated graphics/tex-pst-barcode{,-doc} to 0.15
Updated graphics/tex-pst-node{,-doc} to 1.36
Updated graphics/tex-pst-ovl{,-doc} to 0.07
Updated graphics/tex-pst-plot{,-doc} to 1.75
Updated graphics/tex-pstricks{,-doc} to 2.66
Updated graphics/tex-pstricks-add{,-doc} to 3.80
Updated graphics/tex-roundrect{,-doc} to 2.2
Updated graphics/tex-shapes{,-doc} to 1.1
Updated graphics/tex-tikzmark{,-doc} to 1.2
Updated graphics/tex-tikzsymbols{,-doc} to 4.0
Get rid of:
SbBasic.h:99:5: error: call to function 'cc_debugerror_post' that
is neither visible in the template definition nor found by
argument-dependent lookup
Ok@ wiz
June 13, 2016 - Version 10.20 (production release)
Added a few new Sigma LensTypes (thanks LibRaw and Jos Roost)
Added a new Sony LensType (thanks Jos Roost)
Added two new Canon LensTypes (thanks Jos Roost and Norbert Wasser)
Added a couple of new PentaxModelID's (thanks Louis Granboulan for one)
Added a new Pentax LensType (thanks Louis Granboulan)
Added a few new Olympus PictureMode values (thanks Daniel Pollock)
Added a few more XMP tags
Decode a new Nikon video tag (thanks Hayo Baan)
Patched to allow protected binary data tags to be extracted when -b is combined with -php or -X if the tag is specifically requested
Fixed bug introduced in version 9.96 where extended XMP is ignored if the MWG module is used
Fixed problem where the MWG module wasn't loaded automatically if there were MWG tags in the argument to the -p option
Fixed column alignment of alternate-language output (requires Unicode::LineBreak to be installed)
Fixed problem writing Sigma:LensFocalRange
May 31, 2016 - Version 10.19
Added a few new Sony and Sigma LensType values (thanks Jos Roost)
Decode more Nikon tags (thanks Warren Hatch)
Fixed an incorrect Sigma LensType (thanks LibRaw)
Fixed decoding of D500 custom settings for NEF images (thanks Warren Hatch)
May 27, 2016 - Version 10.18
Added a number of new Sigma LensTypes (thanks LibRaw)
Added a few new Sony/Minolta lenses (thanks Jos Roost)
Added ability to write FilePermissions
Decode NikonCustom settings for the D500 (thanks Warren Hatch)
Decode PLUS MediaSummaryCode values
Use hexadecimal for Sigma LensType values
Changed -fileOrder option to sort numbers in strings numerically
Fixed typo in Samsung lens name
May 16, 2016 - Version 10.17
Added support for Leica X-U (Typ 113) maker notes
Added a new Pentax LensType (thanks Louis Granboulan)
Added a number of new Sony lenses (thanks Jos Roost)
Added a new Canon LensType (thanks Mees Dekker)
Extract TIFF-format thumbnails and previews
Patched to ignore XML entities inside comments
Fixed inconsistent conversion of PreviewColorSpace values
Fixed writing of TargetPrinter tag
Fixed bug introduced in 10.16 which which could cause a runtime warning when using the -o option and not writing any "real" tags
May 3, 2016 - Version 10.16
Added %D, %F and %E filename format codes
Added a new Minolta lens (thanks Jos Roost)
Decode Photoshop Compression mode
Decode Nikon MultiExposure information for the D5
Updated decoding of Sony tags for ILCA-68 (thanks Jos Roost)
Fixed bug adding back XMP tags after deleting all XMP from MOV/MP4 files
Fixed problem using -o option when reading from stdin (ie. FILE is "-")
Fixed problem where user-defined Composite tags may not always override pre-defined Composite tags with the same name, and added feature to allow the user to specify whether they should override existing tags or not
1.5.0
=====
### Significant changes relative to 1.5 beta1:
1. Fixed an issue whereby a malformed motion-JPEG frame could cause the "fast
path" of libjpeg-turbo's Huffman decoder to read from uninitialized memory.
2. Added libjpeg-turbo version and build information to the global string table
of the libjpeg and TurboJPEG API libraries. This is a common practice in other
infrastructure libraries, such as OpenSSL and libpng, because it makes it easy
to examine an application binary and determine which version of the library the
application was linked against.
3. Fixed a couple of issues in the PPM reader that would cause buffer overruns
in cjpeg if one of the values in a binary PPM/PGM input file exceeded the
maximum value defined in the file's header. libjpeg-turbo 1.4.2 already
included a similar fix for ASCII PPM/PGM files. Note that these issues were
not security bugs, since they were confined to the cjpeg program and did not
affect any of the libjpeg-turbo libraries.
4. Fixed an issue whereby attempting to decompress a JPEG file with a corrupt
header using the `tjDecompressToYUV2()` function would cause the function to
abort without returning an error and, under certain circumstances, corrupt the
stack. This only occurred if `tjDecompressToYUV2()` was called prior to
calling `tjDecompressHeader3()`, or if the return value from
`tjDecompressHeader3()` was ignored (both cases represent incorrect usage of
the TurboJPEG API.)
5. Fixed an issue in the ARM 32-bit SIMD-accelerated Huffman encoder that
prevented the code from assembling properly with clang.
6. The `jpeg_stdio_src()`, `jpeg_mem_src()`, `jpeg_stdio_dest()`, and
`jpeg_mem_dest()` functions in the libjpeg API will now throw an error if a
source/destination manager has already been assigned to the compress or
decompress object by a different function or by the calling program. This
prevents these functions from attempting to reuse a source/destination manager
structure that was allocated elsewhere, because there is no way to ensure that
it would be big enough to accommodate the new source/destination manager.
1.4.90 (1.5 beta1)
==================
### Significant changes relative to 1.4.2:
1. Added full SIMD acceleration for PowerPC platforms using AltiVec VMX
(128-bit SIMD) instructions. Although the performance of libjpeg-turbo on
PowerPC was already good, due to the increased number of registers available
to the compiler vs. x86, it was still possible to speed up compression by about
3-4x and decompression by about 2-2.5x (relative to libjpeg v6b) through the
use of AltiVec instructions.
2. Added two new libjpeg API functions (`jpeg_skip_scanlines()` and
`jpeg_crop_scanline()`) that can be used to partially decode a JPEG image. See
[libjpeg.txt](libjpeg.txt) for more details.
3. The TJCompressor and TJDecompressor classes in the TurboJPEG Java API now
implement the Closeable interface, so those classes can be used with a
try-with-resources statement.
4. The TurboJPEG Java classes now throw unchecked idiomatic exceptions
(IllegalArgumentException, IllegalStateException) for unrecoverable errors
caused by incorrect API usage, and those classes throw a new checked exception
type (TJException) for errors that are passed through from the C library.
5. Source buffers for the TurboJPEG C API functions, as well as the
`jpeg_mem_src()` function in the libjpeg API, are now declared as const
pointers. This facilitates passing read-only buffers to those functions and
ensures the caller that the source buffer will not be modified. This should
not create any backward API or ABI incompatibilities with prior libjpeg-turbo
releases.
6. The MIPS DSPr2 SIMD code can now be compiled to support either FR=0 or FR=1
FPUs.
7. Fixed additional negative left shifts and other issues reported by the GCC
and Clang undefined behavior sanitizers. Most of these issues affected only
32-bit code, and none of them was known to pose a security threat, but removing
the warnings makes it easier to detect actual security issues, should they
arise in the future.
8. Removed the unnecessary `.arch` directive from the ARM64 NEON SIMD code.
This directive was preventing the code from assembling using the clang
integrated assembler.
9. Fixed a regression caused by 1.4.1[6] that prevented 32-bit and 64-bit
libjpeg-turbo RPMs from being installed simultaneously on recent Red Hat/Fedora
distributions. This was due to the addition of a macro in jconfig.h that
allows the Huffman codec to determine the word size at compile time. Since
that macro differs between 32-bit and 64-bit builds, this caused a conflict
between the i386 and x86_64 RPMs (any differing files, other than executables,
are not allowed when 32-bit and 64-bit RPMs are installed simultaneously.)
Since the macro is used only internally, it has been moved into jconfigint.h.
10. The x86-64 SIMD code can now be disabled at run time by setting the
`JSIMD_FORCENONE` environment variable to `1` (the other SIMD implementations
already had this capability.)
11. Added a new command-line argument to TJBench (`-nowrite`) that prevents the
benchmark from outputting any images. This removes any potential operating
system overhead that might be caused by lazy writes to disk and thus improves
the consistency of the performance measurements.
12. Added SIMD acceleration for Huffman encoding on SSE2-capable x86 and x86-64
platforms. This speeds up the compression of full-color JPEGs by about 10-15%
on average (relative to libjpeg-turbo 1.4.x) when using modern Intel and AMD
CPUs. Additionally, this works around an issue in the clang optimizer that
prevents it (as of this writing) from achieving the same performance as GCC
when compiling the C version of the Huffman encoder
(<https://llvm.org/bugs/show_bug.cgi?id=16035>). For the purposes of
benchmarking or regression testing, SIMD-accelerated Huffman encoding can be
disabled by setting the `JSIMD_NOHUFFENC` environment variable to `1`.
13. Added ARM 64-bit (ARMv8) NEON SIMD implementations of the commonly-used
compression algorithms (including the slow integer forward DCT and h2v2 & h2v1
downsampling algorithms, which are not accelerated in the 32-bit NEON
implementation.) This speeds up the compression of full-color JPEGs by about
75% on average on a Cavium ThunderX processor and by about 2-2.5x on average on
Cortex-A53 and Cortex-A57 cores.
14. Added SIMD acceleration for Huffman encoding on NEON-capable ARM 32-bit
and 64-bit platforms.
For 32-bit code, this speeds up the compression of full-color JPEGs by
about 30% on average on a typical iOS device (iPhone 4S, Cortex-A9) and by
about 6-7% on average on a typical Android device (Nexus 5X, Cortex-A53 and
Cortex-A57), relative to libjpeg-turbo 1.4.x. Note that the larger speedup
under iOS is due to the fact that iOS builds use LLVM, which does not optimize
the C Huffman encoder as well as GCC does.
For 64-bit code, NEON-accelerated Huffman encoding speeds up the
compression of full-color JPEGs by about 40% on average on a typical iOS device
(iPhone 5S, Apple A7) and by about 7-8% on average on a typical Android device
(Nexus 5X, Cortex-A53 and Cortex-A57), in addition to the speedup described in
[13] above.
For the purposes of benchmarking or regression testing, SIMD-accelerated
Huffman encoding can be disabled by setting the `JSIMD_NOHUFFENC` environment
variable to `1`.
15. pkg-config (.pc) scripts are now included for both the libjpeg and
TurboJPEG API libraries on Un*x systems. Note that if a project's build system
relies on these scripts, then it will not be possible to build that project
with libjpeg or with a prior version of libjpeg-turbo.
16. Optimized the ARM 64-bit (ARMv8) NEON SIMD decompression routines to
improve performance on CPUs with in-order pipelines. This speeds up the
decompression of full-color JPEGs by nearly 2x on average on a Cavium ThunderX
processor and by about 15% on average on a Cortex-A53 core.
17. Fixed an issue in the accelerated Huffman decoder that could have caused
the decoder to read past the end of the input buffer when a malformed,
specially-crafted JPEG image was being decompressed. In prior versions of
libjpeg-turbo, the accelerated Huffman decoder was invoked (in most cases) only
if there were > 128 bytes of data in the input buffer. However, it is possible
to construct a JPEG image in which a single Huffman block is over 430 bytes
long, so this version of libjpeg-turbo activates the accelerated Huffman
decoder only if there are > 512 bytes of data in the input buffer.
18. Fixed a memory leak in tjunittest encountered when running the program
with the `-yuv` option.
1.4.2
=====
### Significant changes relative to 1.4.1:
1. Fixed an issue whereby cjpeg would segfault if a Windows bitmap with a
negative width or height was used as an input image (Windows bitmaps can have
a negative height if they are stored in top-down order, but such files are
rare and not supported by libjpeg-turbo.)
2. Fixed an issue whereby, under certain circumstances, libjpeg-turbo would
incorrectly encode certain JPEG images when quality=100 and the fast integer
forward DCT were used. This was known to cause `make test` to fail when the
library was built with `-march=haswell` on x86 systems.
3. Fixed an issue whereby libjpeg-turbo would crash when built with the latest
& greatest development version of the Clang/LLVM compiler. This was caused by
an x86-64 ABI conformance issue in some of libjpeg-turbo's 64-bit SSE2 SIMD
routines. Those routines were incorrectly using a 64-bit `mov` instruction to
transfer a 32-bit JDIMENSION argument, whereas the x86-64 ABI allows the upper
(unused) 32 bits of a 32-bit argument's register to be undefined. The new
Clang/LLVM optimizer uses load combining to transfer multiple adjacent 32-bit
structure members into a single 64-bit register, and this exposed the ABI
conformance issue.
4. Fixed a bug in the MIPS DSPr2 4:2:0 "plain" (non-fancy and non-merged)
upsampling routine that caused a buffer overflow (and subsequent segfault) when
decompressing a 4:2:0 JPEG image whose scaled output width was less than 16
pixels. The "plain" upsampling routines are normally only used when
decompressing a non-YCbCr JPEG image, but they are also used when decompressing
a JPEG image whose scaled output height is 1.
5. Fixed various negative left shifts and other issues reported by the GCC and
Clang undefined behavior sanitizers. None of these was known to pose a
security threat, but removing the warnings makes it easier to detect actual
security issues, should they arise in the future.
Paper is a modern freedesktop icon theme whose design is based around the use
of bold colours and simple geometric shapes to compose icons. Each icon has
been meticulously designed for pixel-perfect viewing.
While it does take some inspiration from the icons in Google's Material Design,
some aspects have been adjusted to better suit a desktop environment.
Arc is a flat theme with transparent elements for GTK 3, GTK 2 and Gnome-Shell
which supports GTK 3 and GTK 2 based desktop environments like Gnome, Unity,
Budgie, Pantheon, XFCE, Mate, etc.
ChangeLog:
http://git.finalrewind.org/feh/plain/ChangeLog
Thu, 09 Jun 2016 08:59:35 +0200 Daniel Friesel <derf+feh@finalrewind.org>
* Release v2.16
* Fix invalid key/button definitions mis-assigning keys/buttons to other
actions
* Add sort mode --sort dirname to sort images by directory instead
of by name. For example, where a normal recursive run will show images in
the order foo/a.jpg -> foo/bar/baz.jpg -> foo/fnord.jpg, a dirname sort
will result in foo/a.jpg -> foo/fnord.jpg -> foo/bar/baz.jpg (Patch by
Sung Pae)
* Add navigation keys next_dir (]) and prev_dir ([) to jump to the first
image of the nex/previous directory (Patch by Sung Pae)
MComix 1.2.1
Release date: 2016-02-12
ENVIRONMENT/LOCALE/TRANSLATIONS:
- Fixed a bug that made it impossible to open a book with MComix directly if
the path contains spaces (Windows only)
- Updated libraries for the Windows distribution: UnRAR DLL
MComix 1.2
Release date: 30.01.2016
GUI/MAIN:
- If metadata-based rotation is enabled, PNG files will be automatically
rotated as well.
- Double page mode respects Exif rotation now.
- Some transformation issues have been fixed. In double page mode, all
transformations are applied to the union of both pages. Also, reflection
is performed first, followed by rotation.
- Some OSD issues have been fixed.
- When flipping pages, the content of the viewport does not appear
somewhere else first anymore.
- The default scaling quality is now "Bilinear".
GUI/THUMBNAILER:
- The thumbnailer now displays page numbers in a reasonable color
appropriate for the respective background color.
- The thumbnailer uses the same size for all thumbnails now. If thumbnails
need to be rescaled, it is done using linear interpolation.
- When using the keyboard, the thumbnailer now tries to keep the currently
selected page in the upper half of its area.
- The size of the thumbnailer is calculated more reasonably now.
- Fixed a bug that could lead to crashes if the thumbnailer uses a dynamic
background color.
- The "missing image" icon appears in its original size in the thumbnailer.
- Fix race condition that could lead to thumbnails being rendered with
different sizes.
- Added a workaround for a bug in gdk-pixbuf that could prevent thumbnails
of animated GIF images from being rendered properly. For details, see
https://bugzilla.gnome.org/show_bug.cgi?id=735422
- Re-enabled double buffering for the thumbnailer.
GUI/LIBRARY:
- Some encoding issues with the library have been fixed.
- The cover display in the library has been fixed.
- The book area uses a tighter layout.
- Various other issues with the library have been fixed.
GUI/EDITARCHIVE:
- Applying changes in the "Edit archive" dialog could raise an exception
under certain circumstances. This has been fixed.
- Fixed a bug that prevented MComix from shutting down properly if an
archive with no images in it has been opened or the "Edit archive" dialog
has been used.
- Some issues with displaying thumbnails in the "Edit archive" dialog have
been fixed.
GUI/WM:
- Fullscreen handling has been improved.
- The Preferences dialog is not modal anymore.
- When clicking on the thumbnailer while the main window is unfocused, the
window should be focused only without switching to another page. This has
been fixed so it works properly now.
- Modal dialogs do not immediately hide the mouse cursor in the main area
anymore.
- Fix various minor window manager interaction issues.
- The default window width is now 640 pixels.
GUI/MISC:
- You can select the text in the Properties dialog now.
- The "Continue reading" dialog defaults to "Yes" now.
- Dialogs refresh their respective contents whenever you switch to another
page or book.
- The password dialog now displays the path of the archive.
- Overall widget handling has been fixed and improved. This also eliminates
some GTK warnings.
- Fixed a lot of issues with empty directories and empty archives.
- File name filters and supported formats handling have been improved.
- Various other issues with the Preferences dialog and the Properties
dialog have been fixed.
- Recently opened PDF files are now listed in the "Recent Files" menu.
ENVIRONMENT/LOCALE/TRANSLATIONS:
- The list of supported image formats is now determined dynamically,
depending on the underlying libraries. This might implicitly add support
for image formats such as WebP.
- Due to a bug, PIL (or Pillow) was preferred over GdkPixbuf on Windows
in earlier versions. Now, GdkPixbuf will be preferred on Windows as well.
- MComix uses czipfile when available to speed up extraction of
encrypted zip files.
- Zombie processes will be removed if possible.
- Some issues related to child processes have been fixed. Unnecessary
console windows should not appear anymore.
- File descriptors will be properly closed when possible. This fixes an
issue especially on Windows where files used to stay "locked".
- Searching for external tools (e.g. MuPDF) is performed more properly now.
- Temporary directories will be created only when necessary and will be
deleted as soon as the corresponding book has been closed.
- The shebangs now ask for python2 instead of just python so we do not
accidentally run Python 3.
- comicthumb has been rewritten to make it consistent with MComix.
- Some locale issues have been fixed.
- The French translation has been updated.
- The Russian translation has been updated (by Ulyanich Michael).
- The Korean translation has been updated (by Gyeongmin Bak).
- Fixed PDF support with newer versions of MuPDF (1.7 and 1.8).
- Better support for using the 7z executable: encrypted files are now
supported (including encrypted header support, and for all supported
formats: 7z, RAR and ZIP).
- Fixed an issue with unrar.dll that could lead to crashes if 7z is also
present.
- Improved detection of available RAR extractors. (unrar-free is currently
incompatible with MComix and will be ignored.)
- Fixed support for LHA archives (they were always marked as empty).
- Fixed support for tar.xz archives (they were always marked as empty).
- Updated libraries for the Windows distribution: Pillow 3.1.0 and
UnRAR 5.30
- On Windows, MComix normally appears to be frozen on startup while
fontconfig is updating the font cache. As a workaround, a window will be
displayed.
- Fix MComix not starting when 'auto load last file' is on and the last
attempt at opening a file was an invalid path
- The Windows icon file mcomix.ico has been updated.
MISC:
- The MIME database has been updated.
- The Py2Exe workaround has been removed.
- A Wine-based helper script allows building Windows versions of MComix in
Wine.
- Huge code refactoring, cleanups and documentation updates
- Various minor bug fixes and improvements
- New code and examples for testing, improved logging
- New version numbering scheme in compliance with PEP440
- ChangeLog updated for MComix 1.01
Version 1.6.23beta01 [May 29, 2016]
Stop a potential memory leak in png_set_tRNS() (Bug report by Ted Ying).
Fixed the progressive reader to handle empty first IDAT chunk properly
(patch by Timothy Nikkel). This bug was introduced in libpng-1.6.0 and
only affected the libpng16 branch.
Added tests in pngvalid.c to check zero-length IDAT chunks in various
positions. Fixed the sequential reader to handle these more robustly
(John Bowler).
Version 1.6.23rc01 [June 2, 2016]
Corrected progressive read input buffer in pngvalid.c. The previous version
the code invariably passed just one byte at a time to libpng. The intent
was to pass a random number of bytes in the range 0..511.
Moved sse2 prototype from pngpriv.h to contrib/intel/intel_sse.patch.
Added missing ")" in pngerror.c (Matt Sarrett).
Version 1.6.23rc02 [June 4, 2016]
Fixed undefined behavior in png_push_save_buffer(). Do not call
memcpy() with a null source, even if count is zero (Leon Scroggins III).
Version 1.6.23 [June 9, 2016]
Fixed bad link to RFC2083 in png.5 (Nikola Forro).
1.3.24 (May 30, 2016)
==========================
.. _`GCC bug 53967` : http://gcc.gnu.org/bugzilla/show_bug.cgi?id=53967
Special Issues:
* A shell exploit (CVE-2016-5118) was discovered associated with a
filename syntax where file names starting with '|' are intepreted as
shell commands executed via popen(). Insufficient sanitization in
the SVG and MVG renderers allows such filenames to be passed through
from potentially untrusted files. There might be other ways for
untrusted inputs to produce such filenames. Due to this issue,
support for the feature is removed entirely.
* A shell exploit was discovered associated with the gnuplot delegate
and which is triggered by the 'gplt' entry in delegates.mgk. A
remote exploit is possible if the attacker can cause a provided SVG
or MVG file to be rendered (or the user opens a provided file). The
gnuplot program must be installed in order for the exploit to be
successful. It is strongly recommended to remove this entry in all
delegates.mgk files.
* Due to `GCC bug 53967`_, several key agorithms (e.g. convolution)
may execute much faster (e.g. 2-3X) for x86-64 and/or when SSE is
enabled for floating point math (`-mfpmath=sse`) if the GCC option
`-frename-registers` is used. Default 32-bit builds do not
experience the problem since they use '387 math. It is not clear in
what version of GCC this problem started but it was not noticed by
the developers until the GCC 4.6 timeframe. Other compilers do not
suffer from this bug. Please lobby the GCC project to fix this
embarrassing performance bug.
Security Fixes:
* BLOB: Remove support for reading input from a shell command, or
writing output to a shell command, by prefixing the specified
filename (containing the command) with a '|'. This feature provided
a remote shell execution opportunity.
* DIB: Fixed out of bounds reads. Added more header validations.
* JNG: File size limits are enforced.
* MAT: Fixed denial of service opportunity. Fix hang on corrupt deflate stream.
* META: Fixed out of bounds reads and writes.
* MIFF: Fixed thrown assertion.
* MSL: Ignore the file extension on MSL files. It is necessary to add
a "msl:" prefix to MSL files to read the as an image.
* MVG: No longer assume that files ending with extension ".mvg" are
MVG files. MVG parsing does more validity checking on its input.
Assure that enough PrimitiveInfo structures are allocated in advance
to support a given vector path (heap overflow problem).
* PCX: Fixed unreasonable memory allocation due to intentionally
corrupt file.
* PDB: Fixed a heap buffer overflow and out of bounds read.
* PICT: Fixed an out of bounds write.
* PS: Ghostscript is now always run with -dSAFER for safer execution.
* PSD: Fixed segmentation violations, heap buffer overflows, and out
of bounds writes.
* RLE: Fixed out of bounds reads and writes.
* ReadImages(): Fixed a possible infinite recursion due to a crafted input file.
* RotateImage(): Fixed thrown assertion.
* SGI: Fixed out of bounds writes.
* SUN: Fixed out of bounds reads and writes.
* SVG: Fixed heap and stack buffer overflows, as well as segmentation
violations (CVE-2016-2317 and CVE-2016-2318). Also fixed endless
loop, unexpectedly large memory allocation, divide by zero, and
recursion issues.
* TIFF: Fixed an assertion while reading. Fixed benign heap overflow.
* TMP: Adding a "tmp:" prefix to a filename no longer removes the file
since this seems dangerous.
* VIFF: Fix excessive memory allocation with intentionally corrupted input file.
* XCF: Fixed a heap buffer overflow.
* XPM: Fixed several heap buffer overflows, and out of bound
reads/writes. Also fixed a case of excessive memory allocation.
* delegate.mgk: The default delegate.mgk file has been pared down in
order to reduce security exposure.
* gnuplot ('gplt' delegate in delegates.mgk): Support for rendering
gnuplot files is removed since the format is inherently insecure.
* File names: File names starting with a '|' character are no longer
interpreted as shell commands to be executed as input or output.
Bug fixes:
* BMP: Fix reading 24-bit Microsoft BMP which claims to have a
colormap.
* FILE: `file://` URLs are properly supported now (they never worked
before).
* JP2: It is now possible to write lossless JPEG 2000 "JP2" format.
* SVG: Support font-size "medium".
New Features:
* Blob I/O C APIs: Added signed versions of short and long Read/Write
functions.
* FILE: `file://` URLs are properly supported now (they never worked
before).
* MAT: Matlab V4 is now partially supported.
* Magick++: Added double-precision xResolution() and yResolution()
methods to support setting the horizontal and vertical resolution
with double floating point precision.
* Mogrify now supports a -preserve-timestamp option to preserve file
access and modification timestamps.
Feature improvements:
Windows Delegate Updates/Additions:
* Updated bundled libpng to release 1.6.19.
* Updated bundled libwebp to release 0.4.4.
* Update bundled libxml2 to release 2.9.3.
* Update bundled freetype to release 2.6.2.
Build Changes:
* Added ``--enable-broken-coders`` configure option to enable file
format support which may be broken or cause security issues. The
PSD format is now classified as "broken" (until it is fixed).
Behavior Changes:
* PSD format is not included in the build by default.
* Files ending with ".mvg" and ".msl" are not assumed to be image
files by default.
* File names starting with '|' are no longer treated as shell
commands.
* Gnuplot and POV delegate support is removed from the default
delegate.mgk file.
Version 1.6.22beta01 [January 23, 2016]
Changed PNG_USE_MKSTEMP to __COVERITY__ to select alternate
"tmpfile()" implementation in contrib/libtests/pngstest.c
Fixed NO_STDIO build of pngunknown.c to skip calling png_init_io()
if there is no stdio.h support.
Added a png_image_write_to_memory() API and a number of assist macros
to allow an application that uses the simplified API write to bypass
stdio and write directly to memory.
Added some warnings (png.h) and some check code to detect *possible*
overflow in the ROW_STRIDE and simplified image SIZE macros. This
disallows image width/height/format that *might* overflow. This is
a quiet API change that limits in-memory image size (uncompressed) to
less than 4GByte and image row size (stride) to less than 2GByte.
Revised workaround for false-positive Coverity issue in pngvalid.c.
Version 1.6.22beta02 [February 8, 2016]
Only use exit(77) in configure builds.
Corrected error in PNG_IMAGE_PNG_SIZE_MAX. This new macro underreported
the palette size because it failed to take into account that the memory
palette has to be expanded to full RGB when it is written to PNG.
Updated CMakeLists.txt, added supporting scripts/gen*.cmake.in
and test.cmake.in (Roger Leigh).
Relaxed limit checks on gamma values in pngrtran.c. As suggested in
the comments gamma values outside the range currently permitted
by png_set_alpha_mode are useful for HDR data encoding. These values
are already permitted by png_set_gamma so it is reasonable caution to
extend the png_set_alpha_mode range as HDR imaging systems are starting
to emerge.
Version 1.6.22beta03 [March 9, 2016]
Added a common-law trademark notice and export control information
to the LICENSE file, png.h, and the man page.
Restored "& 0xff" in png_save_uint_16() and png_save_uint_32() that
were accidentally removed from libpng-1.6.17.
Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
(Robert C. Seacord).
Removed dubious "#if INT_MAX" test from png.h that was added to
libpng-1.6.19beta02 (John Bowler).
Add ${INCLUDES} in scripts/genout.cmake.in (Bug report by Nixon Kwok).
Updated LICENSE to say files in the contrib directory are not
necessarily under the libpng license, and that some makefiles have
other copyright owners.
Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
Made contrib/libtests/timepng more robust. The code no longer gives
up/fails on invalid PNG data, it just skips it (with error messages).
The code no longer fails on PNG files with data beyond IEND. Options
exist to use png_read_png (reading the whole image, not by row) and, in
that case, to apply any of the supported transforms. This makes for
more realistic testing; the decoded data actually gets used in a
meaningful fashion (John Bowler).
Fixed some misleading indentation (Krishnaraj Bhat).
Version 1.6.22beta04 [April 5, 2016]
Force GCC compilation to C89 if needed (Dagobert Michelsen).
SSE filter speed improvements for bpp=3:
memcpy-free implementations of load3() / store3().
call load3() only when needed at the end of a scanline.
Version 1.6.22beta05 [April 27, 2016]
Added PNG_FAST_FILTERS macro (defined as
PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).
Various fixes for contrib/libtests/timepng.c
Moved INTEL-SSE code from pngpriv.h into contrib/intel/intel_sse.patch.
Fixed typo (missing underscore) in #define PNG_READ_16_TO_8_SUPPORTED
(Bug report by Y.Ohashik).
Version 1.6.22beta06 [May 5, 2016]
Rebased contrib/intel_sse.patch.
Quieted two Coverity issues in contrib/libtests/timepng.c.
Fixed issues with scripts/genout.cmake.in (David Capello, Nixon Kwok):
Added support to use multiple directories in ZLIBINCDIR variable,
Fixed CMAKE_C_FLAGS with multiple values when genout is compiled on MSVC,
Fixed pnglibconf.c compilation on OS X including the sysroot path.
Version 1.6.22rc01 [May 14, 2016]
No changes.
Version 1.6.22rc02 [May 16, 2016]
Removed contrib/timepng from default build; it does not build on platforms
that don't supply clock_gettime().
Version 1.6.22rc03 [May 17, 2016]
Restored contrib/timepng to default build but check for the presence
of clock_gettime() in configure.ac and Makefile.am.
Version 1.6.22 [May 26, 2016]
No changes.
ImageMagick TM, is a package for display and interactive manipulation
of images for the X Window System. It is written in C and interfaces
to the X library, and therefore does not require any proprietary
toolkit in order to compile. Although the software is copyrighted, it
is available for free and can be redistributed without fee.
The ImageMagick image display program can display an image on any
workstation screen running an X server. It can read and write many of
the more popular image formats including JPEG, TIFF, PNM, GIF, and
Photo CD. In addition you can interactively resize, rotate, sharpen,
color reduce, or add special effects to an image and save your
completed work in the same or differing image format.
This package tracks 6 release branch for backward compatibility.
Changes (from lib/Image/BMP.pm):
Version 1.19 2016/05/22
-----------------------
* Stupid filehandle bug fix for view_ascii
Version 1.18 2016/05/21
-----------------------
* Fix for non-byte indexes, reads and writes (Thanks for the inspiration, Mike Paolucci)
