CVS log for pkgsrc/graphics/jasper/Makefile

Up to [cvs.NetBSD.org] / pkgsrc / graphics / jasper

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

jasper: need _DARWIN_C_SOURCE with _POSIX_C_SOURCE

Else u_char won't be defined which breaks sysctl.h.
Might be a bug in macOS 15.

*: replace CMAKE_ARGS with CMAKE_CONFIGURE_ARGS

jasper: needs _POSIX_C_SOURCE

jasper: updated to 4.2.4

4.2.4 (2024-04-27)

* Added some missing checks to the jas_heic_decode function in the
  HEIC codec

jasper: update to 4.2.3.

4.2.3 (2024-03-30)
==================

* Added a missing check in the JPC codec (#381).

jasper: update to 4.2.2.

4.2.2 (2024-03-11)
==================

* Fix minor build issue (#374).

jasper: updated to 4.2.1

4.2.1 (2024-02-18)

* Fix a build problem for the DJGPP/MS-DOS environment

jasper: updated to 4.2.0

4.2.0 (2024-02-05)

Add the JAS_PACKAGING option to the CMake build in an attempt to allow
easier control over rpath settings by packagers of JasPer.
Remove a number of obsolete scripts.
Make some cosmetic changes to the code for the JPC codec in order
to improve readability.
Fix a portability bug related to threads/atomics.
Replace some lingering uses of strtok in the JPC coder with jas_strtok,
since the use of strtok is problematic in multithreading contexts.

jasper: updated to 4.1.2

4.1.2 (2024-01-11)
* Fix invalid memory write bug
* Fix missing range check in the JPC encoder

jasper: update to 4.1.1.

4.1.1 (2023-11-28)
==================

* Disallow in-source builds by default.
* Fix a potential integer overflow problem in the jas_get_total_mem_size
  function (for the Windows platform).

jasper: update to 4.1.0.

4.1.0 (2023-11-04)
==================

* Add support for building several JasPer application programs for
  WebAssembly target with WASI support.

jasper: updated to 4.0.0

4.0.0 (2022-11-05)

Improve static linking
Fix path relocation in mingw environment
Improve logging and build scripts.
Improve JPEG-2000 conformance test results.
Enable PIC by default.
Fix memory leaks in function cmdopts_parse
imgcmp:
  Add quiet (-q) option.
  Add debug-level option.
  Fix memory leak.
imginfo:
  Add quiet (-q) option.
Fix bug in parsing PGX header.
Fix integer overflow bug

*: convert to cmake/build.mk

Bump all dependent packages of wayland (belatedly)

The package changed with the addition of its libepoll-shim dependency.
Otherwise, we can get:
ERROR: libepoll-shim>=0.0.20210418 is not installed; can't buildlink files.

revbump for icu and libffi

jasper: updated to 2.0.33

2.0.33 (2021-08-01)
Fix a JP2/JPC decoder bug.
Fix a build issue impacting some platforms.

jasper: update to 2.0.32

2.0.32 (2021-04-18)
===================

* Test release performed with GitHub Actions.

2.0.29 (2021-04-16)
===================

* Loosen some overly tight restrictions on JP2 codestreams, which caused
  some valid codestreams to be rejected. (#289)

jasper: updated to 2.0.28

2.0.28
* Fix potential null pointer dereference in the JP2/JPC decoder.
* Fix ignoring of JAS_STREAM_FILEOBJ_NOCLOSE at stream close time.
* Fix integral type sizing problem in JP2 codec.

jasper: updated to 2.0.27

2.0.27

Check for an image containing no samples in the PGX decoder.
Check for dimensions of zero in the JPC and JPEG decoders.
Fix an arguably incorrect type for an integer literal in the PGX decoder.
Check for an invalid component reference in the JP2 decoder.
Check on integer size in JP2 decoder.

jasper: updated to 2.0.26

2.0.26
* Fix JP2 decoder bug that can cause a null pointer dereference for
  some invalid CDEF boxes.

jasper: Update to 2.0.25

2.0.25 (2021-02-07)
===================

* Fix memory-related bugs in the JPEG-2000 codec resulting from
  attempting to decode invalid code streams. (#264, #265)

jasper: updated to 2.0.24

2.0.24:
Add JAS_VERSION_MAJOR, JAS_VERSION_MINOR, JAS_VERSION_PATCH for easier access to the JasPer version.
Fixes stack overflow bug on Windows, where variable-length arrays are not available

jasper: updated to 2.0.23

2.0.23:
Fix CVE-2020-27828, heap-overflow in cp_create() in jpc_enc.c

jasper: updated to 2.0.22

2.0.22:
* Update manual
* Remove JPEG dummy codec. Jasper needs libjpeg for JPEG support
* Fix test suite build failure regarding disabled MIF codec
* Fix OpenGL/glut detection

jasper: updated to 2.0.21

2.0.21:
Unknown changes

jasper: updated to 2.0.20

2.0.20

* fixed several ISO/IEC 15444-4 conformance bugs

* fixed new variant of CVE-2016-9398

* disabled the MIF codec by default for security reasons (but it is still
  included in the library);
  in a future release, the MIF codec may also be excluded from the
  library by default

* added documentation for the I/O streams library API

jasper: updated to 2.0.19

version-2.0.19

Unfortunately 2.0.17 was released on a branch. Later the branch was
removed and the 2.0.17 tag was placed on another commit and branch.

This resulted in various distros who pulled the tarball at different
times two have different jasper versions for 2.0.17.

https://repology.org/project/jasper/versions shows that some even have a
2.0.18.

To reduce all this confusion I will release 2.0.19 now.
With a clean changelog referencing what @MaxKellermann and @jubalh (me)
did on our fork at jasper-maint.

If we want to revert things later or improve the changelog this can be
easily done on master ontop of this.
But I feel we need this release to reduce the confusion and put the
project on a clear track again.

jasper: Fix version to 2.0.17

The actual latest version is 2.0.17. "Unknown changes" still applies.

Released: 21.7.2020

jasper: updated to 2.0.18

2.0.18:
Unknown changes.

graphics/jasper: fix typo in jasper.pc.in location

jasper: Update to 2.0.16

CVE-2018-19539: Fixed a denial of service in jas_image_readcmpt

graphics/jasper: update to 2.0.14.

Changes:
- In the JPC codec, the requirement that the number of tile parts be at
  least one has been removed (since the JPEG-2000 standard allows
  a special value of zero to mean the number of tile parts is unspecified).
- add option to disable programs
- Include jasper/jas_debug.h when using jas_eprintf
  Fixes building with -Werror=implicit-function-declaration.
- Applied patches to resolve some missing export problems.
  See: https://github.com/mdadams/jasper/issues/122
- Moved inttypes.h and stdbool.h includes to jas_types.h and fixed
  the build for Visual Studio 2012 and lower.
- Correct or add comments for jas_safe_* functions
  Mostly fixing bad copy-n-paste issues, or functions added without any
  comment.
- Added a check in the JP2 encoder to ensure that the image to be coded
  has at least one component.  Also, made some small changes to a
  private build script.
- Fixed bugs due to uninitialized data in the JP2 decoder.
  Also, added some comments marking I/O stream interfaces that probably
  need to be changed (in the long term) to fix integer overflow
  problems.
- Added some additional checking to prevent a potential integer overflow
  due to conversion in the JPC decoder.
- Added numerous more-detailed error messages for the JPC and JP2
  codecs.
- Added a partial verbose capability for the run_test_1 script.
- Moved a test case from the bad category to the good category, as the
  test case had been miscategorized.
- Add some regression test cases.
- Fixed some potential double-free problems in the JPC codec.

Updated jasper to 2.0.12.


    Bumped the version number.

    Added some additional checking to prevent a potential integer overflow
    due to conversion in the JPC decoder.

    Added numerous more-detailed error messages for the JPC and JP2
    codecs.
    Added a partial verbose capability for the run_test_1 script.
    Moved a test case from the bad category to the good category, as the
    test case had been miscategorized.


    Added another regression test case.

    Fixed some potential double-free problems in the JPC codec.

Disable PDF files regeneration from disabling doxygen detection.
And install pre-generated PDF files.
Bump PKGREVISION.
Thank you, adam@.

Disable documentation files generation. Bump PKGREVISION

When LaTeX is detected, some LaTeX style files are required.

Changes 2.0.10:
Fixed a problem in the JP2 encoder that caused a null pointer dereference when no ICC profile data is available (e.g., in the case of an unknown color space).

Add upstream patch for CVE-2016-8654.

Upgrade jasper from 1.900.1 to 1.900.29.
This integrates most of the patches we had applied in pkgsrc.

The changes are in ChangeLog, and are not well summarized anywhere
I can find, sorry...

OK from adam@

Add fixes for CVE-2008-3520 and CVE-2008-3522, patches from
https://bugs.gentoo.org/show_bug.cgi?id=222819

Bump PKGREVISION.

patch denial of service issues CVE-2016-1577 CVE-2016-2116 CVE-2016-2089
via debian

Remove manual OPSYSVARS additions which are now part of the default set.

Pullup ticket #4624 - requested by taca
graphics/jasper: security patch

Revisions pulled up:
- graphics/jasper/Makefile                                      1.39-1.40
- graphics/jasper/distinfo                                      1.16-1.17
- graphics/jasper/patches/patch-CVE-2014-9029                   deleted
- graphics/jasper/patches/patch-ad                              deleted
- graphics/jasper/patches/patch-ae                              deleted
- graphics/jasper/patches/patch-ag                              deleted
- graphics/jasper/patches/patch-ah                              deleted
- graphics/jasper/patches/patch-ai                              deleted
- graphics/jasper/patches/patch-aj                              deleted
- graphics/jasper/patches/patch-configure                       1.1
- graphics/jasper/patches/patch-src_libjasper_jp2_jp2__cod.c    1.1
- graphics/jasper/patches/patch-src_libjasper_jp2_jp2__dec.c    1.1
- graphics/jasper/patches/patch-src_libjasper_jpc_jpc__cs.c     1.1
- graphics/jasper/patches/patch-src_libjasper_jpc_jpc__dec.c    1.1-1.2
- graphics/jasper/patches/patch-src_libjasper_jpc_jpc__qmfb.c   1.1

---
   Module Name:	pkgsrc
   Committed By:	he
   Date:		Thu Jan  1 14:15:27 UTC 2015

   Modified Files:
   	pkgsrc/graphics/jasper: Makefile distinfo
   Added Files:
   	pkgsrc/graphics/jasper/patches: patch-configure
   	    patch-src_libjasper_jp2_jp2__cod.c
   	    patch-src_libjasper_jp2_jp2__dec.c
   	    patch-src_libjasper_jpc_jpc__cs.c
   	    patch-src_libjasper_jpc_jpc__dec.c
   Removed Files:
   	pkgsrc/graphics/jasper/patches: patch-CVE-2014-9029 patch-ad patch-ae
   	    patch-ag patch-ah patch-ai patch-aj

   Log Message:
   Rename patches to conform to the "new" style.
   Add comments to the patches.
   Add fix for oCERT-2014-012, pulled from RedHat.
   Add fix from Debian bug 469786.
   Add LICENSE setting, I think modified-bsd is fitting.
   Bump PKGREVISION.

---
   Module Name:	pkgsrc
   Committed By:	snj
   Date:		Sun Feb  8 23:04:22 UTC 2015

   Modified Files:
   	pkgsrc/graphics/jasper: Makefile distinfo
   	pkgsrc/graphics/jasper/patches: patch-src_libjasper_jpc_jpc__dec.c
   Added Files:
   	pkgsrc/graphics/jasper/patches: patch-src_libjasper_jpc_jpc__qmfb.c

   Log Message:
   Fix CVE-2014-8157 and CVE-2014-8158.  Bump PKGREVISION to 10.

Fix CVE-2014-8157 and CVE-2014-8158.  Bump PKGREVISION to 10.

Rename patches to conform to the "new" style.
Add comments to the patches.
Add fix for oCERT-2014-012, pulled from RedHat.
Add fix from Debian bug 469786.
Add LICENSE setting, I think modified-bsd is fitting.
Bump PKGREVISION.

Add patch for CVE-2014-9029 from
 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-9029

Remove pkgviews: don't set PKG_INSTALLATION_TYPES in Makefiles.

Revbump after graphics/jpeg and textproc/icu

Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.

Pullup ticket #3637 - requested by drochner
graphics/jasper: security patch

Revisions pulled up:
- graphics/jasper/Makefile                                      1.34
- graphics/jasper/distinfo                                      1.14
- graphics/jasper/patches/patch-ai                              1.2

---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Thu Dec 22 16:17:57 UTC 2011

   Modified Files:
           pkgsrc/graphics/jasper: Makefile distinfo
           pkgsrc/graphics/jasper/patches: patch-ai

   Log Message:
   add patches from Redhat to add some input validation and fix a
   memory allocation error; both could lead to heap buffer overflows
   (CVE-2011-4516, CVE-2011-4517)
   bump PKGREV

add patches from Redhat to add some input validation and fix a
memory allocation error; both could lead to heap buffer overflows
(CVE-2011-4516, CVE-2011-4517)
bump PKGREV

The solaris stdbool.h requires c99 which is fine for jasper, but
not so good for things that depend upon jasper.  See PR#43901
This stops jasper from using stdbool.h (on solaris only.)

Mechanically replace references to graphics/jpeg with the suitable
alternative from mk/jpeg.buildlink3.mk

This allows selection of an alternative jpeg library (namely the x86 MMX,
SSE, SSE2 accelerated libjpeg-turbo) via JPEG_DEFAULT=libjpeg-turbo, and
follows the current standard model for alternatives (fam, motif, fuse etc).

The mechanical edits were applied via the following script:

#!/bin/sh
for d in */*; do
  [ -d "$d" ] || continue
  for i in "$d/"Makefile* "$d/"*.mk; do
    case "$i" in *.orig|*"*"*) continue;; esac
    out="$d/x"
    sed -e 's;graphics/jpeg/buildlink3\.mk;mk/jpeg.buildlink3.mk;g' \
        -e 's;BUILDLINK_PREFIX\.jpeg;JPEGBASE;g' \
        < "$i" > "$out"
    if cmp -s "$i" "$out"; then
      rm -f "$out"
    else
      echo "Edited $i"
      mv -f "$i" "$i.orig" && mv "$out" "$i"
    fi
  done
done

Second try at jpeg-8 recursive PKGREVISION bump.

add a patch from Debian to tolerate j2k pictures with alpha channel
(seems really just tolerated -- looks ugly but at least doesn't crash)
bump PKGREVISION

bump revision because of graphics/jpeg update

add a patch from Debian (bug #413041) to fix some heap corruption
on malformed image input (CVE-2007-2721),
also fix some initialisation which could cause random misbehaviour
on cleanup,
bump PKGREVISION

Add DESTDIR support.

Use correct Autoconf macro for stdbool.h detection and functionality test.

Fixes build of some depending package such as netpbm (with its horrible,
horrible hardcoded _XOPEN_SOURCES definitions all over the place) on Solaris.

Will be submitted upstream.

Update to 1.900.1:
This release fixes some build problems as well as
a multiply-defined symbol problem in jpc_qmfb.h.

Fix pkglint warnings

Fix building on Darwin/Mac OS X

Update to 1.900.0:

1) The wavelet transform code has been rewritten in order to be more
cache efficient (via loop tiling).  As a few individuals have noted,
the old code could often result in an excessive number of cache misses.

2) Some man pages have been added to the distribution as provided
by Roland Stigge.

3) Some simple timer routines have been added to facilitate performance
measurements.

4) Numerous bugs have been fixed (e.g., memory leaks, JP2 box processing
problem, etc.).

5) Some name space pollution issues have been resolved.

6) A few compiler warnings have been fixed.

Instead of setting compiler flags in each package if it uses C99,
allow USE_LANGUAGES+=c99 and let gcc and mipspro do the right thing.
May need to be reviewed/added for other compilers.
ok rillig@

Recursive revision bump / recommended bump for gettext ABI change.

Pullup ticket 817 - requested by Jan Schaumann
portability fix for jasper

Revisions pulled up:
- pkgsrc/graphics/jasper/Makefile	1.19

   Module Name:		pkgsrc
   Committed By:	jschauma
   Date:		Sat Oct  8 21:11:55 UTC 2005

   Modified Files:
   	pkgsrc/graphics/jasper: Makefile

   Log Message:
   Add '-c99' to CFLAGS for the MIPSPro compiler chain.

Add '-c99' to CFLAGS for the MIPSPro compiler chain.

Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.

Libtool fix for PR pkg/26633, and other issues.  Update libtool to 1.5.10
in the process.  (More information on tech-pkg.)

Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and
installing .la files.

Bump PKGREVISION (only) of all packages depending directly on the above
via a buildlink3 include.

Enable pkgviews installation.

Changes 1.701.0:
* A preliminary attempt at a color management subsystem has been added to JasPer
* Previously, the configure process did not generate a configuration header file
* Temporary files created with the jas_stream_tmpfile function were not
  correctly removed upon file close under Microsoft Windows
* An option has been added to the JPEG encoder to allow a quality factor to be
  specified
* A new make target has been added for RPM building
* The code now compiles with many fewer warnings on most platforms
* The JasPer software license has been made slightly less restrictive
* The configure-based build process has been updated to use newer versions of
  the GNU configure tools

LIBTOOL_OVERRIDE and SHLIBTOOL_OVERRIDE are now lists of shell globs
relative to ${WRKSRC}.  Remove redundant LIBTOOL_OVERRIDE settings that
are automatically handled by the default setting in bsd.pkg.mk.

bl3ify

The long awaited update libtool to 1.5.2.

Some pkgsrc things
	- Fix PLISTs for packages that use -release
	- Include canonicalisation of a couple of paths for the benefit
	  of qt3-*
	- the normal version=sunos patching
	- fix all library_names_spec for the standard set of symlinks

The libtool things some of which had already made it into pkgsrc libtool.

New in 1.5.2: 2004-01-25; CVS version 1.5.0a, Libtool team:
* lt_dlrealloc is an official part of the libltdl API.
* --tag, --silent and --debug options are preserved and reused when libtool
  calls itself for relinking etc.
* `-pthread' and similar options are honoured when linking shared libraries.
* -no-suppress in compile mode shows compiler output for both PIC and non-PIC
  object compilation.
* New link mode option `-precious-files-regex' to prevent accidental removal
  of files you want to keep, such as test coverage data, from the temporary
  output directory.
* Directories specified in /etc/ld.so.conf are no longer hardcoded on Linux.
* Recognises the 'R' symbol type on Solaris so read-only symbols can be
  exported.
* Bug fixes.

New in 1.5: 2003-04-14; CVS version 1.4e, Libtool team:
* First stable release of multi-language architecture.
* libtool and libltdl support for Mac OS/X.
* libltdl will now use cygwins dlopen API instead of always forcing
  LoadLibrary.
* Support auto-import patch to binutils on cygwin for much improved dll
  support.
* Bug fixes.

New in 1.4.3: 2002-10-13; CVS version 1.4.2a, Robert Boehne:
* The libltdl subdirectory now bootstraps correctly with Automake 1.5.
* srcdir != builddir builds with Automake 1.5 work correctly.
* Support for mips-compaq-nonstopux.
* New command line argument, --preserve-dup-deps prevents removal of
  duplicate dependent libraries.

New in 1.4d: 2002-01-07; CVS version 1.4c, Libtool team:
* Help strings display correctly again.
* Better error messages when library linking fails.
* Better error messages from libltdl when loading fails.
* Better search path management in libltdl with `lt_dlinsertsearchdir' call.
* Support /lib/w32api in recent cygwin releases.
* Support cross compilation to mingw.
* Support for .rc files (Windows resource compiler).
* Improved handling of mingw gcc.
* Improved handling of $PATH with entries containing spaces.
* Improved support for linking with gcc on aix4* and aix5*.
* Improved support for GCC 3.0.
* Initial support for QNX RTOS, UnixWare 7 and OpenUNIX 8.
* Bug fixes to the OpenBSD port.
* Bug fixes.

New in 1.4.2: 2001-09-11; CVS version 1.4.1a, Gary V. Vaughan:
* libltdl now builds on solaris again
* diagnose and warn about not-quite-working combinations of gcc and
  ld on solaris.
* Improved OpenBSD support.
* Improved cygwin support.
* Bugfixes.

New in 1.4.1: 2001-09-03; CVS version 1.4.0a, Libtool team:
* Better error messages from libltdl when loading fails.
* Don't leave here-doc files behind.
* Improved support for OpenBSD.
* Libtool will build with autoconf-2.50 and higher.
* Plug memory management bugs in libltdl.
* Prefer shl_load to dlopen for better operation on HP-UX.

New in 1.4b: 2001-07-09; CVS version 1.4a, Libtool team:
* Now bootstraps with autoconf-2.50 and automake-1.4-p4.
* Always try to build at least a static lib, even if both static and
  shared libs were disabled.
* Full support for C++ compiler.
* Support for GNU gcj compiler.
* libltdl can now load all modules in a given path according to user
  supplied criteria with `lt_dlforeachfile' call.
* Improved support for AIX ia64, djgpp, HPUX, hurd, OpenBSD, sco3.2*.
* Internal mutex handling no longer has namespace clashes on NCR MP-RAS.
* New pdemo and tagdemo tests.
* Bug fixes.

Solaris, like FreeBSD, doesn't install libjasper-1.600.so, tweak the
PLIST accordingly.

libjasper.so was not built in FreeBSD, so disable them using PLIST_SUBST,
should fix the problems seen in the last bulk build.

Use LIBTOOL_OVERRIDE instead of LTCONFIG_OVERRIDE. Fixes PR 20520
(Darwin build)

COMMENT should start with a capital letter.

s/netbsd.org/NetBSD.org/

Use tech-pkg@ in favor of packages@ as MAINTAINER for orphaned packages.
Should anybody feel like they could be the maintainer for any of thewe packages,
please adjust.

fix warning in installed include file (jas_image.h)
make debug output conditional on debug level > 0

bump PKGREVISION

update jasper to 1.600.0

pkgsrc changes:
	fix include files -- they used autoconf HAVE_XXX defines

Changes:
	- The support for the JP2 format has been improved.
	- The support for the PNM family of formats has been improved (and
	  should now be truly complete).
	- Numerous other minor bugs have been fixed.

[The new program jiv (jasper image viewer) is disabled, since it
needs X11 and OpenGL.  It will be commited as a separate package.]

buildlink1 -> buildlink2.

Update to 1.500.4. Some bugfixes, and documentation updates.

Initial import of jasper-1.500.0, a JPEG-2000 reference implementation.

Initial revision