Update ABI/API compatibility reports after commit 9b7620ee7a3d72bfcdbebd78e607c5ee8aa...

diff --git a/abi-check/changelog/openjpeg/current/log.html b/abi-check/changelog/openjpeg/current/log.html
index 6bb368bb2709c625315b5d9ab00a5ad94881483d..10e2d452afe82d76f93259730af63a2b6039b67d 100644 (file)
--- a/abi-check/changelog/openjpeg/current/log.html
+++ b/abi-check/changelog/openjpeg/current/log.html
@@ -20,7 +20,16 @@
 <br/>
 <h1>Changelog from Git</h1><br/><br/>
 <div class='changelog'>
-<pre class='wrap'>commit 4f447c6e18444a4182f7844d25033861eee8df55
+<pre class='wrap'>commit 9b7620ee7a3d72bfcdbebd78e607c5ee8aa7fade
+Merge: 4f447c6 3aef207
+Author: Even Rouault &lt;even.rouault@spatialys.com&gt;
+Date:   2019-04-26 19:52:52 +0200
+
+    Merge pull request #1185 from Young-X/fix
+    
+    Fix several potential vulnerabilities
+
+commit 4f447c6e18444a4182f7844d25033861eee8df55
 Merge: 5dd75f6 a94cfbd
 Author: Even Rouault &lt;even.rouault@spatialys.com&gt;
 Date:   2019-04-25 15:32:22 +0200
@@ -80,6 +89,31 @@ Date:   2019-04-23 16:52:21 +0200
 
     j2k.c: use correct naming convention for total_data_size variable
 
+commit 3aef207f90e937d4931daf6d411e092f76d82e66
+Author: Young Xiao &lt;YangX92@hotmail.com&gt;
+Date:   2019-03-16 20:09:59 +0800
+
+    bmp_read_rle4_data(): avoid potential infinite loop
+
+commit 21399f6b7d318fcdf4406d5e88723c4922202aa3
+Author: Young Xiao &lt;YangX92@hotmail.com&gt;
+Date:   2019-03-16 19:57:27 +0800
+
+    convertbmp: detect invalid file dimensions early
+    
+    width/length dimensions read from bmp headers are not necessarily
+    valid. For instance they may have been maliciously set to very large
+    values with the intention to cause DoS (large memory allocation, stack
+    overflow). In these cases we want to detect the invalid size as early
+    as possible.
+    
+    This commit introduces a counter which verifies that the number of
+    written bytes corresponds to the advertized width/length.
+    
+    See commit 8ee335227bbc for details.
+    
+    Signed-off-by: Young Xiao &lt;YangX92@hotmail.com&gt;
+
 commit d0dd894ae24d0f2f09072adf1b966033dd64672d
 Author: Antonin Descampe &lt;antonin@gmail.com&gt;
 Date:   2019-04-02 15:37:38 +0200
@@ -852,31 +886,6 @@ Date:   2018-01-07 17:45:53 +0100
 
     Add known failure for Windows VC10 i386 target (refs #1043)
 
-commit 6e6f8354a0614a6af61568a73aea573b8e76f894
-Author: szukw000 &lt;szukw000@arcor.de&gt;
-Date:   2018-01-07 17:11:09 +0100
-
-    Some Doxygen tags are removed
-
-commit 4841292b5df8f5ed3c92f1760769428ad7500b7a
-Author: Stefan Weil &lt;sw@weilnetz.de&gt;
-Date:   2017-12-15 16:49:33 +0100
-
-    Fix resource leak (CID 179466)
-    
-    Coverity report:
-    
-    CID 179466 (#1 of 1): Resource leak (RESOURCE_LEAK)
-    93. leaked_storage: Variable name going out of scope leaks the storage it points to.
-    
-    Signed-off-by: Stefan Weil &lt;sw@weilnetz.de&gt;
-
-commit 9d0d1a0128c7a9324c9a935b2ded01deb4d660d4
-Author: Even Rouault &lt;even.rouault@spatialys.com&gt;
-Date:   2017-11-30 15:39:45 +0100
-
-    Add known failure for i386 target (refs #1043)
-
 ...</pre></div>
 
 </body>

diff --git a/abi-check/db/openjpeg/Tracker.data b/abi-check/db/openjpeg/Tracker.data
index fd5785090e2e9d783d5e27432bf22af0d4f6aa47..8a51848ee3861b29aedbc883af8436c7dce0c53f 100644 (file)
--- a/abi-check/db/openjpeg/Tracker.data
+++ b/abi-check/db/openjpeg/Tracker.data
@@ -705,7 +705,7 @@ $VAR1 = {
                       '2.2.0' => '2017-08-10 00:31',
                       '2.3.0' => '2017-10-04 22:23',
                       '2.3.1' => '2019-04-02 10:08',
-                      'current' => '2019-04-25 15:32:22'
+                      'current' => '2019-04-26 19:52:52'
                     },
           'HeadersDiff' => {
                              '1.1' => {
@@ -813,7 +813,7 @@ $VAR1 = {
           'Maintainer' => 'OpenJPEG team',
           'MaintainerUrl' => 'http://www.openjpeg.org/',
           'PackageDiff' => {},
-          'ScmUpdateTime' => '1556200333',
+          'ScmUpdateTime' => '1556301834',
           'Soname' => {
                         '1.1' => {
                                    'lib/libopenjpeg.so' => 'libopenjpeg.so'

diff --git a/abi-check/installed/openjpeg/current/lib/libopenjp2.a b/abi-check/installed/openjpeg/current/lib/libopenjp2.a
index ffb6c6890b08b79226d45ed6ec81ab56ce552c4e..3812dd2941c6fb4d3e234d97980ac2ca8ba54e7d 100644 (file)
Binary files a/abi-check/installed/openjpeg/current/lib/libopenjp2.a and b/abi-check/installed/openjpeg/current/lib/libopenjp2.a differ

diff --git a/abi-check/installed/openjpeg/current/lib/libopenjp2.so.2.3.1 b/abi-check/installed/openjpeg/current/lib/libopenjp2.so.2.3.1
index 2b55029def4f24f33720b90bc374e9534d055e83..645596cef9d40ae21e169d3a2820a0c246e298c9 100644 (file)
Binary files a/abi-check/installed/openjpeg/current/lib/libopenjp2.so.2.3.1 and b/abi-check/installed/openjpeg/current/lib/libopenjp2.so.2.3.1 differ

diff --git a/abi-check/timeline/openjpeg/index.html b/abi-check/timeline/openjpeg/index.html
index bbb16aa9943e8b9f4a171c0be83d1062c19fbada..30ff6dc040d3f469ca86a4d8c485290d936c3dcd 100644 (file)
--- a/abi-check/timeline/openjpeg/index.html
+++ b/abi-check/timeline/openjpeg/index.html
@@ -30,7 +30,7 @@
 <th>Headers<br/>Diff</th>
 </tr>
 <tr id='current'><td>current</td>
-<td>2019-04-25<br/>15:32</td>
+<td>2019-04-26<br/>19:52</td>
 <td>7</td>
 <td><a href='../../changelog/openjpeg/current/log.html'>changelog</a></td>
 <td class='ok'><a href='../../objects_report/openjpeg/2.3.1/current/report.html'>100%</a></td>
@@ -179,7 +179,7 @@
 <td>N/A</td>
 <td>N/A</td>
 </tr>
-</table><br/>Maintained by <a href='http://www.openjpeg.org/'>OpenJPEG team</a>. Last updated on Thu Apr 25 13:52:36 2019.<br/>
+</table><br/>Maintained by <a href='http://www.openjpeg.org/'>OpenJPEG team</a>. Last updated on Fri Apr 26 18:04:17 2019.<br/>
 <br/>
 <hr/>
 <div align='right'><a class='home' title="Andrey Ponomarenko's ABI laboratory" href='http://abi-laboratory.pro/'>abi-laboratory.pro</a></div>