pool/openexr
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- version update to 2.4.0

Browse Source 
* Completely re-written CMake configuration files
  * Improved support for building on Windows, via CMake
  * Improved support for building on macOS, via CMake
  * All code compiles without warnings on gcc, clang, msvc
  * Cleanup of license and copyright notices
  * floating-point exception handling is disabled by default
  * New Slice::Make method to reliably compute base pointer for a slice.
  * Miscellaneous bug fixes
  * CVE-2018-18444 Issue #351 Out of Memory
  * CVE-2018-18443 Issue #350 heap-buffer-overflow
- upstream does not provide gpg signature anymore
  https://github.com/openexr/openexr/issues/565
- modified sources
  % baselibs.conf
- deleted patches
  - testBox.patch (upstreamed)
  - testBoxAlgo.patch (upstreamed)
- deleted sources
  - ilmbase-2.3.0.tar.gz.sig (not needed)
  - ilmbase.keyring (not needed)

OBS-URL: https://build.opensuse.org/package/show/graphics/openexr?expand=0&rev=29
This commit is contained in:
Petr Gajdos 2019-09-26 08:30:24 +00:00 committed by Git OBS Bridge
parent 80e126b0f4
commit 46df22f397
10 changed files with 76 additions and 295 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
baselibs.conf
View File

@ -1,3 +1,3 @@
libIlmImf-2_3-24 libIlmImf-2_4-24
libIlmImfUtil-2_3-24 libIlmImfUtil-2_4-24
obsoletes "OpenEXR-<targettype> < <version>" obsoletes "OpenEXR-<targettype> < <version>"

3
openexr-2.3.0.tar.gz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:fd6cb3a87f8c1a233be17b94c74799e6241d50fc5efd4df75c7a4b9cf4e25ea6
size 18412067

BIN
openexr-2.3.0.tar.gz.sig
View File

Binary file not shown.

15
openexr-CVE-2017-14988.patch
View File

@ -1,15 +0,0 @@
--- a/IlmImf/ImfHeader.cpp
+++ b/IlmImf/ImfHeader.cpp
@@ -1185,6 +1185,11 @@ Header::readFrom (OPENEXR_IMF_INTERNAL_NAMESPACE::IStream &is, int &version)
checkIsNullTerminated (typeName, "attribute type name");
OPENEXR_IMF_INTERNAL_NAMESPACE::Xdr::read <OPENEXR_IMF_INTERNAL_NAMESPACE::StreamIO> (is, size);
+ if( size < 0 )
+ {
+ throw IEX_NAMESPACE::InputExc("Invalid size field in header attribute");
+ }
+
AttributeMap::iterator i = _map.find (name);
if (i != _map.end())

28
openexr-CVE-2017-9111,9113,9115.patch
View File

@ -1,28 +0,0 @@
Index: openexr-2.3.0/exrmakepreview/makePreview.cpp
===================================================================
--- openexr-2.3.0.orig/exrmakepreview/makePreview.cpp 2018-08-10 03:35:00.000000000 +0200
+++ openexr-2.3.0/exrmakepreview/makePreview.cpp 2019-06-14 19:18:36.159142127 +0200
@@ -110,6 +110,9 @@ generatePreview (const char inFileName[]
int h = dw.max.y - dw.min.y + 1;
Array2D <Rgba> pixels (h, w);
+ if (INT_MAX / abs(w) < abs(dw.min.y) ||
+ INT_MAX - abs(dw.min.x) < abs(dw.min.y * w))
+ throw IEX_NAMESPACE::ArgExc ("Invalid data window in image header.");
in.setFrameBuffer (&pixels[0][0] - dw.min.y * w - dw.min.x, 1, w);
in.readPixels (dw.min.y, dw.max.y);
Index: openexr-2.3.0/exrmaketiled/Image.h
===================================================================
--- openexr-2.3.0.orig/exrmaketiled/Image.h 2018-08-10 03:35:00.000000000 +0200
+++ openexr-2.3.0/exrmaketiled/Image.h 2019-06-14 19:19:02.451287048 +0200
@@ -192,6 +192,9 @@ TypedImageChannel<T>::slice () const
const IMATH_NAMESPACE::Box2i &dw = image().dataWindow();
int w = dw.max.x - dw.min.x + 1;
+ if (INT_MAX / abs(w) < abs(dw.min.y) ||
+ INT_MAX - abs(dw.min.x) < abs(dw.min.y * w))
+ throw IEX_NAMESPACE::ArgExc ("Invalid data window in image header.");
return OPENEXR_IMF_INTERNAL_NAMESPACE::Slice (pixelType(),
(char *) (&_pixels[0][0] - dw.min.y * w - dw.min.x),
sizeof (T),

13
openexr-CVE-2018-18444.patch
View File

@ -1,13 +0,0 @@
Index: openexr-2.3.0/exrmultiview/Image.h
===================================================================
--- openexr-2.3.0.orig/exrmultiview/Image.h 2018-08-10 03:35:00.000000000 +0200
+++ openexr-2.3.0/exrmultiview/Image.h 2018-11-07 09:07:48.072431858 +0100
@@ -227,7 +227,7 @@ template <class T>
void
TypedImageChannel<T>::black ()
{
- memset(&_pixels[0][0],0,image().width()/_xSampling*image().height()/_ySampling*sizeof(T));
+ memset(&_pixels[0][0],0,image().width()/_xSampling*(image().height()/_ySampling)*sizeof(T));
}

26
openexr.changes
View File

@ -1,3 +1,29 @@
-------------------------------------------------------------------
Thu Sep 26 08:28:56 UTC 2019 - pgajdos@suse.com
- version update to 2.4.0
* Completely re-written CMake configuration files
* Improved support for building on Windows, via CMake
* Improved support for building on macOS, via CMake
* All code compiles without warnings on gcc, clang, msvc
* Cleanup of license and copyright notices
* floating-point exception handling is disabled by default
* New Slice::Make method to reliably compute base pointer for a slice.
* Miscellaneous bug fixes
* CVE-2018-18444 Issue #351 Out of Memory
* CVE-2018-18443 Issue #350 heap-buffer-overflow
- upstream does not provide gpg signature anymore
https://github.com/openexr/openexr/issues/565
- modified sources
% baselibs.conf
- deleted patches
- openexr-CVE-2017-14988.patch (upstreamed)
- openexr-CVE-2017-9111,9113,9115.patch (upstreamed)
- openexr-CVE-2018-18444.patch (upstreamed)
- deleted sources
- openexr-2.3.0.tar.gz.sig (not needed)
- openexr.keyring (not needed)
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Sep 20 12:41:26 UTC 2019 - pgajdos@suse.com Fri Sep 20 12:41:26 UTC 2019 - pgajdos@suse.com

171
openexr.keyring
View File

@ -1,171 +0,0 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.2.4 (GNU/Linux)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=
=TTbV
-----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.22 (GNU/Linux)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=XC5I
-----END PGP PUBLIC KEY BLOCK-----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=at9E
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2.0.14 (GNU/Linux)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=+7rR
-----END PGP PUBLIC KEY BLOCK-----

108
openexr.spec
View File

@ -20,26 +20,17 @@
%define asan_build 0 %define asan_build 0
%define debug_build 0 %define debug_build 0
%define sonum 24 %define sonum 24
%global so_suffix -2_3-24 %global so_suffix -2_4
Name: openexr Name: openexr
Version: 2.3.0 Version: 2.4.0
Release: 0 Release: 0
Summary: Utilities for working with HDR images in OpenEXR format Summary: Utilities for working with HDR images in OpenEXR format
License: BSD-3-Clause License: BSD-3-Clause
Group: Productivity/Graphics/Other Group: Productivity/Graphics/Other
URL: http://www.openexr.com/ URL: http://www.openexr.com/
Source0: https://github.com/openexr/openexr/releases/download/v%{version}/openexr-%{version}.tar.gz Source0: https://github.com/openexr/openexr/archive/v%{version}.tar.gz
Source1: https://github.com/openexr/openexr/releases/download/v%{version}/openexr-%{version}.tar.gz.sig
Source2: baselibs.conf Source2: baselibs.conf
Source3: openexr.keyring BuildRequires: cmake
# https://github.com/openexr/openexr/pull/401
Patch0: openexr-CVE-2018-18444.patch
# https://github.com/openexr/openexr/pull/401
# CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
Patch1: openexr-CVE-2017-9111,9113,9115.patch
# CVE-2017-14988 [bsc#1061305]
Patch2: openexr-CVE-2017-14988.patch
BuildRequires: automake
BuildRequires: fltk-devel BuildRequires: fltk-devel
BuildRequires: freeglut-devel BuildRequires: freeglut-devel
BuildRequires: gcc-c++ BuildRequires: gcc-c++
@ -50,11 +41,11 @@ Obsoletes: OpenEXR <= 1.6.1
Provides: OpenEXR = %{version} Provides: OpenEXR = %{version}
%if %{asan_build} || %{debug_build} %if %{asan_build} || %{debug_build}
BuildRequires: ilmbase-debugsource BuildRequires: ilmbase-debugsource
BuildRequires: libHalf%{sonum}-debuginfo BuildRequires: libHalf%{so_suffix}-%{sonum}-debuginfo
BuildRequires: libIex%{so_suffix}-debuginfo BuildRequires: libIex%{so_suffix}-%{sonum}-debuginfo
BuildRequires: libIexMath%{so_suffix}-debuginfo BuildRequires: libIexMath%{so_suffix}-%{sonum}-debuginfo
BuildRequires: libIlmThread%{so_suffix}-debuginfo BuildRequires: libIlmThread%{so_suffix}-%{sonum}-debuginfo
BuildRequires: libImath%{so_suffix}-debuginfo BuildRequires: libImath%{so_suffix}-%{sonum}-debuginfo
%endif %endif
%description %description
@ -70,45 +61,31 @@ contains a set of utilities to work with this format.
* exr2aces, converter to ACES format * exr2aces, converter to ACES format
* exrmultiview, combine two or more images into one multi-view * exrmultiview, combine two or more images into one multi-view
%package -n libIlmImf%{so_suffix} %package -n libIlmImf%{so_suffix}-%{sonum}
Summary: Library to Handle EXR Pictures in 16-Bit Floating-Point Format Summary: Library to Handle EXR Pictures in 16-Bit Floating-Point Format
Group: System/Libraries Group: System/Libraries
%description -n libIlmImf%{so_suffix} %description -n libIlmImf%{so_suffix}-%{sonum}
OpenEXR is a high dynamic-range (HDR) image file format developed by OpenEXR is a high dynamic-range (HDR) image file format developed by
Industrial Light & Magic for use in computer imaging applications. Industrial Light & Magic for use in computer imaging applications.
This package contains shared library libIlmImf This package contains shared library libIlmImf
%post -n libIlmImf%{so_suffix} -p /sbin/ldconfig %package -n libIlmImfUtil%{so_suffix}-%{sonum}
%postun -n libIlmImf%{so_suffix} -p /sbin/ldconfig
%files -n libIlmImf%{so_suffix}
%license LICENSE
%{_libdir}/libIlmImf-*.so.*
%package -n libIlmImfUtil%{so_suffix}
Summary: Library to simplify development of OpenEXR utilities Summary: Library to simplify development of OpenEXR utilities
Group: System/Libraries Group: System/Libraries
%description -n libIlmImfUtil%{so_suffix} %description -n libIlmImfUtil%{so_suffix}-%{sonum}
OpenEXR is a high dynamic-range (HDR) image file format developed by OpenEXR is a high dynamic-range (HDR) image file format developed by
Industrial Light & Magic for use in computer imaging applications. Industrial Light & Magic for use in computer imaging applications.
This package contains shared library libIlmImfUtil This package contains shared library libIlmImfUtil
%post -n libIlmImfUtil%{so_suffix} -p /sbin/ldconfig
%postun -n libIlmImfUtil%{so_suffix} -p /sbin/ldconfig
%files -n libIlmImfUtil%{so_suffix}
%license LICENSE
%{_libdir}/libIlmImfUtil-*.so.*
%package devel %package devel
Summary: Development files for the 16-bit FP EXR picture handling library Summary: Development files for the 16-bit FP EXR picture handling library
Group: Development/Libraries/C and C++ Group: Development/Libraries/C and C++
Requires: libIlmImf%{so_suffix} = %{version} Requires: libIlmImf%{so_suffix}-%{sonum} = %{version}
Requires: libIlmImfUtil%{so_suffix} = %{version} Requires: libIlmImfUtil%{so_suffix}-%{sonum} = %{version}
Requires: libilmbase-devel >= 2.3.0 Requires: libilmbase-devel >= 2.3.0
Requires: pkgconfig Requires: pkgconfig
Requires: pkgconfig(zlib) Requires: pkgconfig(zlib)
@ -125,7 +102,7 @@ This package contains header files.
%package doc %package doc
Summary: Documentatino for the 16-bit FP EXR picture handling library Summary: Documentatino for the 16-bit FP EXR picture handling library
Group: Documentation/PDF Group: Documentation/Other
Obsoletes: OpenEXR-doc <= 1.6.1 Obsoletes: OpenEXR-doc <= 1.6.1
Provides: OpenEXR-doc = %{version} Provides: OpenEXR-doc = %{version}
@ -136,22 +113,15 @@ Industrial Light & Magic for use in computer imaging applications.
This package contains documentation. This package contains documentation.
%prep %prep
%setup -q %setup -q -n openexr-%{version}/OpenEXR
%patch0 -p1
%patch1 -p1
%patch2 -p1
%build %build
export PTHREAD_LIBS="-lpthread" export PTHREAD_LIBS="-lpthread"
%if %{debug_build} %if %{debug_build}
export CXXFLAGS="%{optflags} -O0" export CXXFLAGS="%{optflags} -O0"
%endif %endif
%configure \ %cmake \
--docdir=%{_docdir}/%{name} \ -DCMAKE_INSTALL_DOCDIR="%{_docdir}/%{name}"
--disable-static \
--enable-large-stack \
--enable-imfexamples \
--enable-imfhugetest
%if %{asan_build} %if %{asan_build}
vmemlimit=$(ulimit -v) vmemlimit=$(ulimit -v)
if [ $vmemlimit != unlimited ]; then if [ $vmemlimit != unlimited ]; then
@ -167,17 +137,22 @@ done
make %{?_smp_mflags} make %{?_smp_mflags}
%install %install
%make_install %cmake_install
find %{buildroot} -type f -name "*.la" -delete -print
%check %check
%ifarch x86_64 # tests takes LOONG, e. g. 20 min
make %{?_smp_mflags} check export LD_LIBRARY_PATH="$PWD/build/IlmImf:$PWD/build/IlmImfUtil:$LD_LIBRARY_PATH"
%endif %ctest
%post -n libIlmImf%{so_suffix}-%{sonum} -p /sbin/ldconfig
%postun -n libIlmImf%{so_suffix}-%{sonum} -p /sbin/ldconfig
%post -n libIlmImfUtil%{so_suffix}-%{sonum} -p /sbin/ldconfig
%postun -n libIlmImfUtil%{so_suffix}-%{sonum} -p /sbin/ldconfig
%files %files
%license LICENSE %license ../LICENSE.md
%doc AUTHORS ChangeLog NEWS README* %doc ../{CHANGES.md,CODE_OF_CONDUCT.md,CODEOWNERS,CONTRIBUTING.md,CONTRIBUTORS.md,README.md,SECURITY.md}
%{_bindir}/exrenvmap %{_bindir}/exrenvmap
%{_bindir}/exrheader %{_bindir}/exrheader
%{_bindir}/exrmakepreview %{_bindir}/exrmakepreview
@ -185,19 +160,26 @@ make %{?_smp_mflags} check
%{_bindir}/exrstdattr %{_bindir}/exrstdattr
%{_bindir}/exrmultiview %{_bindir}/exrmultiview
%{_bindir}/exrmultipart %{_bindir}/exrmultipart
%{_bindir}/exr2aces
%files devel %files devel
%{_includedir}/OpenEXR %{_includedir}/OpenEXR
%{_libdir}/libIlmImf.so %{_libdir}/libIlmImf%{so_suffix}.so
%{_libdir}/libIlmImfUtil.so %{_libdir}/libIlmImfUtil%{so_suffix}.so
%{_libdir}/pkgconfig/OpenEXR.pc %{_libdir}/pkgconfig/OpenEXR.pc
%{_datadir}/aclocal/openexr.m4 %dir %{_libdir}/cmake/OpenEXR
%{_libdir}/cmake/OpenEXR/*.cmake
%files doc %files doc
%{_docdir}/%{name} %{_docdir}/%{name}
%exclude %{_docdir}/%{name}/AUTHORS %exclude %{_docdir}/%{name}/{CHANGES.md,CODE_OF_CONDUCT.md,CODEOWNERS,CONTRIBUTING.md,CONTRIBUTORS.md,README.md,SECURITY.md}
%exclude %{_docdir}/%{name}/ChangeLog
%exclude %{_docdir}/%{name}/NEWS %files -n libIlmImf%{so_suffix}-%{sonum}
%exclude %{_docdir}/%{name}/README* %license ../LICENSE.md
%{_libdir}/libIlmImf-*.so.*
%files -n libIlmImfUtil%{so_suffix}-%{sonum}
%license ../LICENSE.md
%{_libdir}/libIlmImfUtil-*.so.*
%changelog %changelog

3
v2.4.0.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:4904c5ea7914a58f60a5e2fbc397be67e7a25c380d7d07c1c31a3eefff1c92f1
size 26806627