2.0.20
* fixed several ISO/IEC 15444-4 conformance bugs
* fixed new variant of CVE-2016-9398
* disabled the MIF codec by default for security reasons (but it is still
included in the library);
in a future release, the MIF codec may also be excluded from the
library by default
* added documentation for the I/O streams library API
Bumped the version number.
Added some additional checking to prevent a potential integer overflow
due to conversion in the JPC decoder.
Added numerous more-detailed error messages for the JPC and JP2
codecs.
Added a partial verbose capability for the run_test_1 script.
Moved a test case from the bad category to the good category, as the
test case had been miscategorized.
Added another regression test case.
Fixed some potential double-free problems in the JPC codec.
Fixed a problem in the JP2 encoder that caused a null pointer dereference when no ICC profile data is available (e.g., in the case of an unknown color space).
This integrates most of the patches we had applied in pkgsrc.
The changes are in ChangeLog, and are not well summarized anywhere
I can find, sorry...
OK from adam@
Add comments to the patches.
Add fix for oCERT-2014-012, pulled from RedHat.
Add fix from Debian bug 469786.
Add LICENSE setting, I think modified-bsd is fitting.
Bump PKGREVISION.
Fixes build of some depending package such as netpbm (with its horrible,
horrible hardcoded _XOPEN_SOURCES definitions all over the place) on Solaris.
Will be submitted upstream.
1) The wavelet transform code has been rewritten in order to be more
cache efficient (via loop tiling). As a few individuals have noted,
the old code could often result in an excessive number of cache misses.
2) Some man pages have been added to the distribution as provided
by Roland Stigge.
3) Some simple timer routines have been added to facilitate performance
measurements.
4) Numerous bugs have been fixed (e.g., memory leaks, JP2 box processing
problem, etc.).
5) Some name space pollution issues have been resolved.
6) A few compiler warnings have been fixed.
* A preliminary attempt at a color management subsystem has been added to JasPer
* Previously, the configure process did not generate a configuration header file
* Temporary files created with the jas_stream_tmpfile function were not
correctly removed upon file close under Microsoft Windows
* An option has been added to the JPEG encoder to allow a quality factor to be
specified
* A new make target has been added for RPM building
* The code now compiles with many fewer warnings on most platforms
* The JasPer software license has been made slightly less restrictive
* The configure-based build process has been updated to use newer versions of
the GNU configure tools
pkgsrc changes:
fix include files -- they used autoconf HAVE_XXX defines
Changes:
- The support for the JP2 format has been improved.
- The support for the PNM family of formats has been improved (and
should now be truly complete).
- Numerous other minor bugs have been fixed.
[The new program jiv (jasper image viewer) is disabled, since it
needs X11 and OpenGL. It will be commited as a separate package.]