From patchwork Tue Feb 21 14:40:50 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 19919 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 865F4C61DA3 for ; Tue, 21 Feb 2023 14:41:37 +0000 (UTC) Received: from mail-pl1-f172.google.com (mail-pl1-f172.google.com [209.85.214.172]) by mx.groups.io with SMTP id smtpd.web11.44235.1676990487990921412 for ; Tue, 21 Feb 2023 06:41:28 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20210112.gappssmtp.com header.s=20210112 header.b=25fJF6wM; spf=softfail (domain: sakoman.com, ip: 209.85.214.172, mailfrom: steve@sakoman.com) Received: by mail-pl1-f172.google.com with SMTP id q5so5249915plh.9 for ; Tue, 21 Feb 2023 06:41:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20210112.gappssmtp.com; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=d7F5AnSWtXRB+cBMOBEpQue3hh5IEVcuOCI1wTRrcAQ=; b=25fJF6wMPzgMit9lBL713i6FgonAFgChjDaZKh33iL//4aXL9iEyFplRV1nbNj6hZL tcvwlaOpzTSTc72gNKRWyv4Jd0Z6d8EyeL9CtUzmwacSxHTKjwgc6JLNlWaTZZOtgdCO Q6e0hEyu850A49NLKfFfLcNvoWiWCoMaDiCW6GT1Wmngu9iT3vr7OEH80wR0XypYTYJZ RxJVT4ruuBPY2ILbQg8xir8sQ+i56gmNaXNrf8S5Y4Lnq+qtAis4sHkazusLGoPFuEjZ PQ27OfKN/cWlp7Bn+XBoQWieKuiMzQGrGxwCFeYk0bvvSiCHGBIUIHGXa8UBLYQF3o+w Oetw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=d7F5AnSWtXRB+cBMOBEpQue3hh5IEVcuOCI1wTRrcAQ=; b=YV0PBNP6NczHPekgq7J1SP+pEFuu5JTI+ZgwON52C37uPrmPdtGmzDJ6dGyM95dTOw 66gb+35iFJsKXY9y00BOLAuAOqssdXUKyUY/v69Zhg6FgtU+r0bwY5MhUtqbj0JxYeV4 E6vp/mipO1RlGOVxr/t+MNpuz/n5t0RLxwDaEHPoKZqkgEU017GC6yMset3PvBXSAJyX IMNCqr4wqb3yq5otVCpK5ipHjo9TPT4p++PEMYYdVXyBobFdQWgmk/gRVO0PGbbCUDSs 9S5SJEn0eKW8ygyCwCh6JgoNvGxPupO1HKB0rKj1QY1bohCAPUaIod8vKnS4Z7sjDTtk CR9Q== X-Gm-Message-State: AO0yUKUCD2HUruHKtNs7+yYpZTgVskL1877jm8gAbSlUe4KsZdT4mWHz /hzUVNU5mW14JOdlBu6LxG53G26+xJk5PpXIFbE= X-Google-Smtp-Source: AK7set8PUwr3mDLyQqqSh96UiK+TMUVRT+kGyCliDL4WMBGz7Z64nbVF/H2EhhnTATbhy9jXgnmWGw== X-Received: by 2002:a05:6a20:728f:b0:bb:c422:809f with SMTP id o15-20020a056a20728f00b000bbc422809fmr4372739pzk.4.1676990486960; Tue, 21 Feb 2023 06:41:26 -0800 (PST) Received: from hexa.router0800d9.com (dhcp-72-253-4-112.hawaiiantel.net. [72.253.4.112]) by smtp.gmail.com with ESMTPSA id h5-20020a62b405000000b005ae8e94b0d5sm6151140pfn.107.2023.02.21.06.41.26 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 21 Feb 2023 06:41:26 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 07/23] libjpeg-turbo: upgrade 2.1.4 -> 2.1.5 Date: Tue, 21 Feb 2023 04:40:50 -1000 Message-Id: <1ca7a15d7dece08e18cdb41f897ec37d1349ab70.1676990336.git.steve@sakoman.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 21 Feb 2023 14:41:37 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/177507 From: Alexander Kanavin Significant changes relative to 2.1.4 Fixed issues in the build system whereby, when using the Ninja Multi-Config CMake generator, a static build of libjpeg-turbo (a build in which ENABLE_SHARED is 0) could not be installed, a Windows installer could not be built, and the Java regression tests failed. Fixed a regression introduced by 2.0 beta1[15] that caused a buffer overrun in the progressive Huffman encoder when attempting to transform a specially-crafted malformed 12-bit-per-component JPEG image into a progressive 12-bit-per-component JPEG image using a 12-bit-per-component build of libjpeg-turbo (-DWITH_12BIT=1.) Given that the buffer overrun was fully contained within the progressive Huffman encoder structure and did not cause a segfault or other user-visible errant behavior, given that the lossless transformer (unlike the decompressor) is not generally exposed to arbitrary data exploits, and given that 12-bit-per-component builds of libjpeg-turbo are uncommon, this issue did not likely pose a security risk. Fixed an issue whereby, when using a 12-bit-per-component build of libjpeg-turbo (-DWITH_12BIT=1), passing samples with values greater than 4095 or less than 0 to jpeg_write_scanlines() caused a buffer overrun or underrun in the RGB-to-YCbCr color converter. Fixed a floating point exception that occurred when attempting to use the jpegtran -drop and -trim options to losslessly transform a specially-crafted malformed JPEG image. Fixed an issue in tjBufSizeYUV2() whereby it returned a bogus result, rather than throwing an error, if the align parameter was not a power of 2. Fixed a similar issue in tjCompressFromYUV() whereby it generated a corrupt JPEG image in certain cases, rather than throwing an error, if the align parameter was not a power of 2. Fixed an issue whereby tjDecompressToYUV2(), which is a wrapper for tjDecompressToYUVPlanes(), used the desired YUV image dimensions rather than the actual scaled image dimensions when computing the plane pointers and strides to pass to tjDecompressToYUVPlanes(). This caused a buffer overrun and subsequent segfault if the desired image dimensions exceeded the scaled image dimensions. Fixed an issue whereby, when decompressing a 12-bit-per-component JPEG image (-DWITH_12BIT=1) using an alpha-enabled output color space such as JCS_EXT_RGBA, the alpha channel was set to 255 rather than 4095. Fixed an issue whereby the Java version of TJBench did not accept a range of quality values. Fixed an issue whereby, when -progressive was passed to TJBench, the JPEG input image was not transformed into a progressive JPEG image prior to decompression. Signed-off-by: Alexander Kanavin Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie (cherry picked from commit f779689c2c766b609be31222d71110c1a15145a8) Signed-off-by: Steve Sakoman (cherry picked from commit a5d15ae9f4671790d3c5fb3606ec0861c17ed6dd) Signed-off-by: Steve Sakoman --- .../jpeg/{libjpeg-turbo_2.1.4.bb => libjpeg-turbo_2.1.5.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta/recipes-graphics/jpeg/{libjpeg-turbo_2.1.4.bb => libjpeg-turbo_2.1.5.bb} (97%) diff --git a/meta/recipes-graphics/jpeg/libjpeg-turbo_2.1.4.bb b/meta/recipes-graphics/jpeg/libjpeg-turbo_2.1.5.bb similarity index 97% rename from meta/recipes-graphics/jpeg/libjpeg-turbo_2.1.4.bb rename to meta/recipes-graphics/jpeg/libjpeg-turbo_2.1.5.bb index 1708fa97f0..4d21ca1e1d 100644 --- a/meta/recipes-graphics/jpeg/libjpeg-turbo_2.1.4.bb +++ b/meta/recipes-graphics/jpeg/libjpeg-turbo_2.1.5.bb @@ -14,7 +14,7 @@ SRC_URI = "${SOURCEFORGE_MIRROR}/${BPN}/${BPN}-${PV}.tar.gz \ file://0001-libjpeg-turbo-fix-package_qa-error.patch \ " -SRC_URI[sha256sum] = "d3ed26a1131a13686dfca4935e520eb7c90ae76fbc45d98bb50a8dc86230342b" +SRC_URI[sha256sum] = "bc12bc9dce55300c6bf4342bc233bcc26bd38bf289eedf147360d731c668ddaf" UPSTREAM_CHECK_URI = "http://sourceforge.net/projects/libjpeg-turbo/files/" UPSTREAM_CHECK_REGEX = "/libjpeg-turbo/files/(?P(\d+[\.\-_]*)+)/"