From: Alexander Kanavin <alex.kana...@gmail.com>

Significant changes relative to 2.1.4

Fixed issues in the build system whereby, when using the Ninja Multi-Config 
CMake generator, a static build of libjpeg-turbo (a build in which 
ENABLE_SHARED is 0) could not be installed, a Windows installer could not be 
built, and the Java regression tests failed.

Fixed a regression introduced by 2.0 beta1[15] that caused a buffer overrun in 
the progressive Huffman encoder when attempting to transform a 
specially-crafted malformed 12-bit-per-component JPEG image into a progressive 
12-bit-per-component JPEG image using a 12-bit-per-component build of 
libjpeg-turbo (-DWITH_12BIT=1.) Given that the buffer overrun was fully 
contained within the progressive Huffman encoder structure and did not cause a 
segfault or other user-visible errant behavior, given that the lossless 
transformer (unlike the decompressor) is not generally exposed to arbitrary 
data exploits, and given that 12-bit-per-component builds of libjpeg-turbo are 
uncommon, this issue did not likely pose a security risk.

Fixed an issue whereby, when using a 12-bit-per-component build of 
libjpeg-turbo (-DWITH_12BIT=1), passing samples with values greater than 4095 
or less than 0 to jpeg_write_scanlines() caused a buffer overrun or underrun in 
the RGB-to-YCbCr color converter.

Fixed a floating point exception that occurred when attempting to use the 
jpegtran -drop and -trim options to losslessly transform a specially-crafted 
malformed JPEG image.

Fixed an issue in tjBufSizeYUV2() whereby it returned a bogus result, rather 
than throwing an error, if the align parameter was not a power of 2. Fixed a 
similar issue in tjCompressFromYUV() whereby it generated a corrupt JPEG image 
in certain cases, rather than throwing an error, if the align parameter was not 
a power of 2.

Fixed an issue whereby tjDecompressToYUV2(), which is a wrapper for 
tjDecompressToYUVPlanes(), used the desired YUV image dimensions rather than 
the actual scaled image dimensions when computing the plane pointers and 
strides to pass to tjDecompressToYUVPlanes(). This caused a buffer overrun and 
subsequent segfault if the desired image dimensions exceeded the scaled image 
dimensions.

Fixed an issue whereby, when decompressing a 12-bit-per-component JPEG image 
(-DWITH_12BIT=1) using an alpha-enabled output color space such as 
JCS_EXT_RGBA, the alpha channel was set to 255 rather than 4095.

Fixed an issue whereby the Java version of TJBench did not accept a range of 
quality values.

Fixed an issue whereby, when -progressive was passed to TJBench, the JPEG input 
image was not transformed into a progressive JPEG image prior to decompression.

Signed-off-by: Alexander Kanavin <a...@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceres...@bootlin.com>
Signed-off-by: Richard Purdie <richard.pur...@linuxfoundation.org>
(cherry picked from commit f779689c2c766b609be31222d71110c1a15145a8)
Signed-off-by: Steve Sakoman <st...@sakoman.com>
(cherry picked from commit a5d15ae9f4671790d3c5fb3606ec0861c17ed6dd)
Signed-off-by: Steve Sakoman <st...@sakoman.com>
---
 .../jpeg/{libjpeg-turbo_2.1.4.bb => libjpeg-turbo_2.1.5.bb}     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-graphics/jpeg/{libjpeg-turbo_2.1.4.bb => 
libjpeg-turbo_2.1.5.bb} (97%)

diff --git a/meta/recipes-graphics/jpeg/libjpeg-turbo_2.1.4.bb 
b/meta/recipes-graphics/jpeg/libjpeg-turbo_2.1.5.bb
similarity index 97%
rename from meta/recipes-graphics/jpeg/libjpeg-turbo_2.1.4.bb
rename to meta/recipes-graphics/jpeg/libjpeg-turbo_2.1.5.bb
index 1708fa97f0..4d21ca1e1d 100644
--- a/meta/recipes-graphics/jpeg/libjpeg-turbo_2.1.4.bb
+++ b/meta/recipes-graphics/jpeg/libjpeg-turbo_2.1.5.bb
@@ -14,7 +14,7 @@ SRC_URI = "${SOURCEFORGE_MIRROR}/${BPN}/${BPN}-${PV}.tar.gz \
            file://0001-libjpeg-turbo-fix-package_qa-error.patch \
            "
 
-SRC_URI[sha256sum] = 
"d3ed26a1131a13686dfca4935e520eb7c90ae76fbc45d98bb50a8dc86230342b"
+SRC_URI[sha256sum] = 
"bc12bc9dce55300c6bf4342bc233bcc26bd38bf289eedf147360d731c668ddaf"
 UPSTREAM_CHECK_URI = "http://sourceforge.net/projects/libjpeg-turbo/files/";
 UPSTREAM_CHECK_REGEX = "/libjpeg-turbo/files/(?P<pver>(\d+[\.\-_]*)+)/"
 
-- 
2.34.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#177507): 
https://lists.openembedded.org/g/openembedded-core/message/177507
Mute This Topic: https://lists.openembedded.org/mt/97109722/21656
Group Owner: openembedded-core+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to