OpenEXR 3.4.13__tar.gz → 3.4.14__tar.gz

{openexr-3.4.13 → openexr-3.4.14}/CHANGES.md

@@ -3,6 +3,7 @@
 
 # OpenEXR Release Notes
 
+* [Version 3.4.14](#version-3414-august-6-2026) August 6, 2026
 * [Version 3.4.13](#version-3413-june-19-2026) June 19, 2026
 * [Version 3.4.12](#version-3412-may-24-2026) May 24, 2026
 * [Version 3.4.11](#version-3411-april-29-2026) April 29, 2026
@@ -105,6 +106,267 @@
 * [Version 1.0.1](#version-101)
 * [Version 1.0](#version-10)
 
+## Version 3.4.14 (August 6, 2026)
+
+v3.4.14 is a security-focused patch release. It fixes 15 CVEs plus a
+broad set of additional hardening changes uncovered by the same
+fuzzing/audit effort.
+
+For each of these vulnerabilities, an attacker's vector is a
+maliciously crafted `.exr` file that must be opened by a victim,
+whether through the OpenEXR/OpenEXRUtil C++ libraries, the
+command-line tools (`exrmetrics`, `exrmultiview`, `exrmultipart`), or
+the PyOpenEXR Python bindings. The primary flaw for most of the CVEs
+is **memory corruption** — heap buffer overflows and out-of-bounds
+reads/writes — which at minimum crashes the reading process (denial of
+service) and in several cases could plausibly be leveraged for
+information disclosure or, in the worst cases, arbitrary code
+execution.
+
+No user interaction beyond opening the file is required, so any
+pipeline, service, or application that decodes untrusted or
+third-party EXR files should treat this as a priority
+upgrade. Severity generally ranges from **moderate** (crash-only, or
+requiring an uncommon build configuration) to **high** (heap overflow
+reachable with a small, easily-crafted file on common configurations).
+
+The individual vulnerabilities fall into four broad groups:
+
+* **PyOpenEXR RGB-channel-coalescing bugs**
+  ([CVE-2026-68514](https://www.cve.org/CVERecord?id=CVE-2026-68514),
+  [CVE-2026-68513](https://www.cve.org/CVERecord?id=CVE-2026-68513),
+  [CVE-2026-62986](https://www.cve.org/CVERecord?id=CVE-2026-62986),
+  [CVE-2026-61703](https://www.cve.org/CVERecord?id=CVE-2026-61703)).
+  When the Python bindings combine per-channel data (e.g. `left.R`,
+  `left.G`, `left.B`) into a single coalesced RGB array, conflicting or
+  mismatched channel names/types were not fully validated, which could
+  undersize the destination NumPy buffer. The result is a heap buffer
+  overflow on read, or, in the deep-image case, disclosure of
+  uninitialized ("stale") heap memory through the returned array. This
+  affects only code paths that read files with `separate_channels=False`
+  (the default for RGB coalescing).
+
+* **Integer-overflow-driven heap overflows on 32-bit (ILP32) builds**
+  ([CVE-2026-59985](https://www.cve.org/CVERecord?id=CVE-2026-59985),
+  [CVE-2026-59984](https://www.cve.org/CVERecord?id=CVE-2026-59984),
+  [CVE-2026-59983](https://www.cve.org/CVERecord?id=CVE-2026-59983),
+  [CVE-2026-59982](https://www.cve.org/CVERecord?id=CVE-2026-59982),
+  [CVE-2026-59981](https://www.cve.org/CVERecord?id=CVE-2026-59981),
+  [CVE-2026-59189](https://www.cve.org/CVERecord?id=CVE-2026-59189),
+  [CVE-2026-59186](https://www.cve.org/CVERecord?id=CVE-2026-59186)).
+  On platforms where `size_t`/`int` are 32 bits, buffer sizes computed
+  from attacker-controlled header fields (dimensions, sample counts,
+  tile sizes) could overflow before an allocation or bounds check,
+  yielding an undersized buffer and a subsequent heap out-of-bounds
+  read or write during RLE, B44/B44A, or DWAA decompression, deep
+  sample-count-table decoding, or large-tile handling. These do not
+  affect typical 64-bit desktop/server builds, but are significant for
+  32-bit Linux, embedded, and some mobile/CI targets.
+
+* **Heap out-of-bounds access in `OpenEXRUtil` and the command-line
+  tools with non-default data windows**
+  ([CVE-2026-59981](https://www.cve.org/CVERecord?id=CVE-2026-59981),
+  [CVE-2026-59189](https://www.cve.org/CVERecord?id=CVE-2026-59189),
+  [CVE-2026-59187](https://www.cve.org/CVERecord?id=CVE-2026-59187),
+  [CVE-2026-59186](https://www.cve.org/CVERecord?id=CVE-2026-59186),
+  [CVE-2026-59184](https://www.cve.org/CVERecord?id=CVE-2026-59184)).
+  `FlatImageChannel`/`DeepImageChannel`/`SampleCountChannel` row
+  addressing, and the deep-pixel path in `exrmetrics`, assumed a
+  data window originating at (0, 0). Crafted files with a nonzero data
+  window origin, or subsampled channels, caused row-address
+  computations to land outside the allocated buffer, producing a heap
+  read or write out of bounds.
+
+* **Crashes from malformed metadata (denial of service)**
+  ([CVE-2026-61555](https://www.cve.org/CVERecord?id=CVE-2026-61555),
+  [CVE-2026-59183](https://www.cve.org/CVERecord?id=CVE-2026-59183)).
+  An empty `multiView` attribute could crash `viewFromChannelName()`,
+  and a signed integer overflow while decoding deep tile chunks could
+  lead to an out-of-bounds access. Both are reachable simply by opening
+  a crafted file and result in a crash rather than corrupting memory
+  in an attacker-controlled way.
+
+Beyond the formally-numbered CVEs, this release includes a large batch
+of fixes found by the same audit/fuzzing effort:
+
+* reject truncated or short compressed streams before unpacking
+  (zlib, RLE, DWA, `NO_COMPRESSION`) instead of reading past the end
+  of the input;
+
+* reject oversized allocation requests instead of overflowing size
+  computations (`Array2D`, exrmetrics, exrmultipart channel stores,
+  DWAA/B44 scratch buffers);
+
+* add `NULL`-pointer checks in several `OpenEXRCore` C-API setters
+  (channel list duplication, preview image, `bytes` attributes);
+
+* fix a `Name::operator=` truncation/termination bug;
+
+* close a double-free warning in `ImfTiledMisc`.
+
+This release also fixes a long-standing correctness bug (not a
+security issue) in byte-swapping float-vector attributes that caused
+incorrect results and test failures on big-endian s390x builds.
+
+This release also bumps the vendored OpenJPH version to 0.31.0.
+
+CVEs addressed:
+
+* [CVE-2026-68514](https://www.cve.org/CVERecord?id=CVE-2026-68514)
+  PyOpenEXR deep prefixed literal RGB key collision heap buffer overflow
+* [CVE-2026-68513](https://www.cve.org/CVERecord?id=CVE-2026-68513)
+  PyOpenEXR prefixed literal RGB key collision heap buffer overflow
+* [CVE-2026-62986](https://www.cve.org/CVERecord?id=CVE-2026-62986)
+  PyOpenEXR deep prefixed RGB stale lane disclosure
+* [CVE-2026-61703](https://www.cve.org/CVERecord?id=CVE-2026-61703)
+  PyOpenEXR deep mixed RGB heap buffer overflow
+* [CVE-2026-61555](https://www.cve.org/CVERecord?id=CVE-2026-61555)
+  empty multiView viewFromChannelName file crash
+* [CVE-2026-59985](https://www.cve.org/CVERecord?id=CVE-2026-59985)
+  ILP32 OpenEXRCore RLE decode heap OOB read DoS
+* [CVE-2026-59984](https://www.cve.org/CVERecord?id=CVE-2026-59984)
+  ILP32 B44 InputFile decode scratch buffer overflow
+* [CVE-2026-59983](https://www.cve.org/CVERecord?id=CVE-2026-59983)
+  ILP32 DeepTiledInputFile sample count table decode OOB read
+* [CVE-2026-59982](https://www.cve.org/CVERecord?id=CVE-2026-59982)
+  ILP32 DWAA InputFile packed AC buffer overflow
+* [CVE-2026-59981](https://www.cve.org/CVERecord?id=CVE-2026-59981)
+  OpenEXRUtil SampleCountChannel row nonzero dataWindow heap OOB read
+* [CVE-2026-59189](https://www.cve.org/CVERecord?id=CVE-2026-59189)
+  OpenEXRUtil DeepImageChannel row nonzero dataWindow heap OOB read
+* [CVE-2026-59187](https://www.cve.org/CVERecord?id=CVE-2026-59187)
+  OpenEXR exrmetrics deep pixelmode heap buffer overflow
+* [CVE-2026-59186](https://www.cve.org/CVERecord?id=CVE-2026-59186)
+  OpenEXR ILP32 TiledRgbaInputFile large tile Array2D heap OOB write
+* [CVE-2026-59184](https://www.cve.org/CVERecord?id=CVE-2026-59184)
+  OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write
+* [CVE-2026-59183](https://www.cve.org/CVERecord?id=CVE-2026-59183)
+  Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding
+
+### Merged Pull Requests
+
+* [2569](https://github.com/AcademySoftwareFoundation/openexr/pull/2569)
+  Fix MSYS2 MINGW32 CI: build Imath/OpenJPH from source instead of pacboy
+* [2567](https://github.com/AcademySoftwareFoundation/openexr/pull/2567)
+  Fix handling of subsampled channels in PyOpenEXR
+* [2566](https://github.com/AcademySoftwareFoundation/openexr/pull/2566)
+  Reject DWA RLE and UNKNOWN streams shorter than required channel data.
+* [2565](https://github.com/AcademySoftwareFoundation/openexr/pull/2565)
+  fix signed/unsigned wraparound in HTJ2K planar decode row loop
+* [2550](https://github.com/AcademySoftwareFoundation/openexr/pull/2550)
+  zero-fill deep sample-count table for zero-length compressed input
+* [2548](https://github.com/AcademySoftwareFoundation/openexr/pull/2548)
+  Reject ``NO_COMPRESSION`` scanline chunks with short packed size.
+* [2547](https://github.com/AcademySoftwareFoundation/openexr/pull/2547)
+  Reject short zlib inflates before pixel unpack.
+* [2543](https://github.com/AcademySoftwareFoundation/openexr/pull/2543)
+  Fix subsampled row addressing in ``generic_unpack`` for multi-line chunks
+* [2541](https://github.com/AcademySoftwareFoundation/openexr/pull/2541)
+  Reject oversized channelstore allocations in exrmultipart convert
+* [2540](https://github.com/AcademySoftwareFoundation/openexr/pull/2540)
+  Reject oversized Array2D allocations on ILP32
+* [2539](https://github.com/AcademySoftwareFoundation/openexr/pull/2539)
+  Reject oversized exrmetrics vector allocations on ILP32
+* [2535](https://github.com/AcademySoftwareFoundation/openexr/pull/2535)
+  Fix missing ``INT_MAX`` cap on deep scanline ``sample_count_table_size``
+* [2530](https://github.com/AcademySoftwareFoundation/openexr/pull/2530)
+  Fix exrmultiview heap OOB when union dataWindow misaligns with subsampling
+* [2529](https://github.com/AcademySoftwareFoundation/openexr/pull/2529)
+  Refuse to coalesce RGB channels when there's a conflicting channel name
+* [2528](https://github.com/AcademySoftwareFoundation/openexr/pull/2528)
+  Fix exrmetrics heap OOB on subsampled scanlines
+* [2527](https://github.com/AcademySoftwareFoundation/openexr/pull/2527)
+  Upgrade manylinux cibuildwheel images to manylinux_2_28
+* [2522](https://github.com/AcademySoftwareFoundation/openexr/pull/2522)
+  Fix name comparison in deep prefixed RGB channel coalescing
+* [2516](https://github.com/AcademySoftwareFoundation/openexr/pull/2516)
+  htj2k: Check for duplication ``file_index`` values when reading file header
+* [2510](https://github.com/AcademySoftwareFoundation/openexr/pull/2510)
+  Core: byte-swap the float vector data, not the attribute struct (fixes big-endian crash)
+* [2509](https://github.com/AcademySoftwareFoundation/openexr/pull/2509)
+  Return native-order deep sample counts from ``exr_read_deep_chunk``
+* [2504](https://github.com/AcademySoftwareFoundation/openexr/pull/2504)
+  fix --help message in exrmetrics
+* [2503](https://github.com/AcademySoftwareFoundation/openexr/pull/2503)
+  prevent warning of potential double-free in ImfTiledMisc
+* [2502](https://github.com/AcademySoftwareFoundation/openexr/pull/2502)
+  Reject mixed pixel types when coalescing RGB channels in PyOpenEXR.
+* [2500](https://github.com/AcademySoftwareFoundation/openexr/pull/2500)
+  Fix ``Name::operator=`` to null-terminate long strings
+* [2498](https://github.com/AcademySoftwareFoundation/openexr/pull/2498)
+  Avoid memory allocation in idmanifest parsing
+* [2496](https://github.com/AcademySoftwareFoundation/openexr/pull/2496)
+  Fix empty multiView crash in ``viewFromChannelName()``
+* [2494](https://github.com/AcademySoftwareFoundation/openexr/pull/2494)
+  Reject oversized DWAA buffer allocations on ILP32
+* [2493](https://github.com/AcademySoftwareFoundation/openexr/pull/2493)
+  Fix ILP32 unpacked buffer size truncation in RLE decode
+* [2492](https://github.com/AcademySoftwareFoundation/openexr/pull/2492)
+  Fix ILP32 deep sample-count table size overflow in decoding
+* [2491](https://github.com/AcademySoftwareFoundation/openexr/pull/2491)
+  Fix ILP32 B44/B44A scratch buffer overflow in decode
+* [2490](https://github.com/AcademySoftwareFoundation/openexr/pull/2490)
+  Reject negative pixelDataSize in ``rawPixelDataToBuffer()``
+* [2488](https://github.com/AcademySoftwareFoundation/openexr/pull/2488)
+  Fix OpenEXRUtil ``row()`` OOB read with non-zero data window origin
+* [2487](https://github.com/AcademySoftwareFoundation/openexr/pull/2487)
+  Fix deep pixelmode heap buffer overflow in exrmetrics
+* [2486](https://github.com/AcademySoftwareFoundation/openexr/pull/2486)
+  Fix integer overflow in ``Array2D::resizeErase()`` on ILP32/LLP64 builds
+* [2484](https://github.com/AcademySoftwareFoundation/openexr/pull/2484)
+  Fix signed integer overflow in ``unpack_sample_table()``
+* [2473](https://github.com/AcademySoftwareFoundation/openexr/pull/2473)
+  Reject NULL channel list entries in ``exr_attr_chlist_duplicate()``
+* [2469](https://github.com/AcademySoftwareFoundation/openexr/pull/2469)
+  Reject NULL preview rgba data in ``exr_attr_set_preview()``
+
+### Merged Workflow Pull Requests
+
+* [2568](https://github.com/AcademySoftwareFoundation/openexr/pull/2568)
+  Bump the codeql group with 3 updates
+* [2564](https://github.com/AcademySoftwareFoundation/openexr/pull/2564)
+  Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2
+* [2563](https://github.com/AcademySoftwareFoundation/openexr/pull/2563)
+  Bump sigstore/gh-action-sigstore-python from 3.4.0 to 3.5.0
+* [2558](https://github.com/AcademySoftwareFoundation/openexr/pull/2558)
+  Bump bazel_skylib from 1.9.0 to 1.9.2
+* [2557](https://github.com/AcademySoftwareFoundation/openexr/pull/2557)
+  Bump ossf/scorecard-action from 2.4.3 to 2.4.4
+* [2556](https://github.com/AcademySoftwareFoundation/openexr/pull/2556)
+  Bump the codeql group with 3 updates
+* [2555](https://github.com/AcademySoftwareFoundation/openexr/pull/2555)
+  Bump actions/checkout from 7.0.0 to 7.0.1
+* [2554](https://github.com/AcademySoftwareFoundation/openexr/pull/2554)
+  Bump actions/setup-python from 6.3.0 to 7.0.0
+* [2553](https://github.com/AcademySoftwareFoundation/openexr/pull/2553)
+  Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1
+* [2552](https://github.com/AcademySoftwareFoundation/openexr/pull/2552)
+  Bump vmactions/freebsd-vm from 1.5.0 to 1.5.2
+* [2551](https://github.com/AcademySoftwareFoundation/openexr/pull/2551)
+  Bump the codeql group with 3 updates
+* [2538](https://github.com/AcademySoftwareFoundation/openexr/pull/2538)
+  Bump rules_cc from 0.2.20 to 0.2.22
+* [2514](https://github.com/AcademySoftwareFoundation/openexr/pull/2514)
+  Bump actions/cache from 6.0.0 to 6.1.0
+* [2513](https://github.com/AcademySoftwareFoundation/openexr/pull/2513)
+  Bump vmactions/freebsd-vm from 1.4.8 to 1.5.0
+* [2511](https://github.com/AcademySoftwareFoundation/openexr/pull/2511)
+  Bump rules_cc from 0.2.19 to 0.2.20
+* [2506](https://github.com/AcademySoftwareFoundation/openexr/pull/2506)
+  Bump actions/cache from 5.0.5 to 6.0.0
+* [2505](https://github.com/AcademySoftwareFoundation/openexr/pull/2505)
+  Bump actions/setup-python from 6.2.0 to 6.3.0
+* [2495](https://github.com/AcademySoftwareFoundation/openexr/pull/2495)
+  Bump vmactions/freebsd-vm from 1.4.6 to 1.4.8
+* [2483](https://github.com/AcademySoftwareFoundation/openexr/pull/2483)
+  Fix CI-old workflow failure due to Node 24 on old VFX platform containers
+* [2481](https://github.com/AcademySoftwareFoundation/openexr/pull/2481)
+  Bump actions/checkout from 6.0.3 to 7.0.0
+* [2460](https://github.com/AcademySoftwareFoundation/openexr/pull/2460)
+  Bump rules_cc from 0.2.18 to 0.2.19
+* [2386](https://github.com/AcademySoftwareFoundation/openexr/pull/2386)
+  Bump rules_cc from 0.2.17 to 0.2.18
+
 ## Version 3.4.13 (June 19, 2026)
 
 Patch release that addresses several bugs and security

{openexr-3.4.13 → openexr-3.4.14}/MODULE.bazel

@@ -6,9 +6,9 @@ module(
     compatibility_level = 1,
 )
 
-bazel_dep(name = "bazel_skylib", version = "1.9.0")
+bazel_dep(name = "bazel_skylib", version = "1.9.2")
 bazel_dep(name = "imath", version = "3.2.2.bcr.1")
 bazel_dep(name = "libdeflate", version = "1.25")
 bazel_dep(name = "openjph", version = "0.26.3.bcr.1")
 bazel_dep(name = "platforms", version = "1.1.0")
-bazel_dep(name = "rules_cc", version = "0.2.18")
+bazel_dep(name = "rules_cc", version = "0.2.22")

{openexr-3.4.13 → openexr-3.4.14}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: OpenEXR
-Version: 3.4.13
+Version: 3.4.14
 Summary: Python bindings for the OpenEXR image file format
 Author-Email: Contributors to the OpenEXR project <info@openexr.com>
 Project-URL: Homepage, https://openexr.com

{openexr-3.4.13 → openexr-3.4.14}/external/OpenJPH/CMakeLists.txt

@@ -41,6 +41,7 @@ option(OJPH_BUILD_TESTS "Enables building test code" OFF)
 option(OJPH_BUILD_EXECUTABLES "Enables building command line executables" ON)
 option(OJPH_BUILD_STREAM_EXPAND "Enables building ojph_stream_expand executable" OFF)
 option(OJPH_INSTALL "Install OpenJPH libraries, headers, and CMake config" ON)
+option(OJPH_BUILD_FUZZER "Enables building oss-fuzzing target executable" OFF)
 
 option(OJPH_DISABLE_SIMD "Disables the use of SIMD instructions -- agnostic to architectures" OFF)
 option(OJPH_DISABLE_SSE "Disables the use of SSE SIMD instructions and associated files" OFF)
@@ -104,7 +105,9 @@ if (${CMAKE_VERSION} VERSION_GREATER_EQUAL "3.24.0")
   endif()
 endif()
 
-## Added by Michael Smith
+## Set build flags for AddressSanitizer (ASAN) 
+# these are used when the user sets -DCMAKE_BUILD_TYPE=asan i.e ("cmake .. -DCMAKE_BUILD_TYPE=asan")
+# setting flags for specific build types is documented here: https://cmake.org/cmake/help/latest/variable/CMAKE_LANG_FLAGS_CONFIG.html
 set(CMAKE_CXX_FLAGS_ASAN
   "-fsanitize=address -fno-optimize-sibling-calls -fsanitize-address-use-after-scope -fno-omit-frame-pointer -g -O1"
   CACHE STRING "Flags used by the C++ compiler during AddressSanitizer builds."
@@ -190,53 +193,62 @@ endif()
 ################################################################################################
 
 if (OJPH_INSTALL)
-  install(EXPORT openjph-targets
-    DESTINATION ${CMAKE_INSTALL_LIBDIR}/cmake/openjph
-  )
+install(EXPORT openjph-targets
+  DESTINATION ${CMAKE_INSTALL_LIBDIR}/cmake/openjph
+)
 
-  include(CMakePackageConfigHelpers)
+include(CMakePackageConfigHelpers)
 
-  configure_package_config_file(${CMAKE_CURRENT_SOURCE_DIR}/src/openjph-config.cmake.in
-    "${CMAKE_CURRENT_BINARY_DIR}/openjph-config.cmake"
-    INSTALL_DESTINATION ${CMAKE_INSTALL_LIBDIR}/cmake/openjph
-  )
+configure_package_config_file(${CMAKE_CURRENT_SOURCE_DIR}/src/openjph-config.cmake.in
+  "${CMAKE_CURRENT_BINARY_DIR}/openjph-config.cmake"
+  INSTALL_DESTINATION ${CMAKE_INSTALL_LIBDIR}/cmake/openjph
+)
 
-  write_basic_package_version_file(${CMAKE_CURRENT_BINARY_DIR}/openjph-config-version.cmake
-                                   COMPATIBILITY SameMinorVersion)
+write_basic_package_version_file(${CMAKE_CURRENT_BINARY_DIR}/openjph-config-version.cmake
+                                 COMPATIBILITY SameMinorVersion)
 
-  install(FILES ${CMAKE_CURRENT_BINARY_DIR}/openjph-config.cmake
-                ${CMAKE_CURRENT_BINARY_DIR}/openjph-config-version.cmake
-    DESTINATION ${CMAKE_INSTALL_LIBDIR}/cmake/openjph
-  )
+install(FILES ${CMAKE_CURRENT_BINARY_DIR}/openjph-config.cmake
+              ${CMAKE_CURRENT_BINARY_DIR}/openjph-config-version.cmake
+  DESTINATION ${CMAKE_INSTALL_LIBDIR}/cmake/openjph
+)
 
-  if(IS_ABSOLUTE "${CMAKE_INSTALL_INCLUDEDIR}")
-    set(PKG_CONFIG_INCLUDEDIR "${CMAKE_INSTALL_INCLUDEDIR}")
-  else()
-    set(PKG_CONFIG_INCLUDEDIR "\${prefix}/${CMAKE_INSTALL_INCLUDEDIR}")
-  endif()
+if(IS_ABSOLUTE "${CMAKE_INSTALL_INCLUDEDIR}")
+  set(PKG_CONFIG_INCLUDEDIR "${CMAKE_INSTALL_INCLUDEDIR}")
+else()
+  set(PKG_CONFIG_INCLUDEDIR "\${prefix}/${CMAKE_INSTALL_INCLUDEDIR}")
+endif()
 
-  if(IS_ABSOLUTE "${CMAKE_INSTALL_LIBDIR}")
-    set(PKG_CONFIG_LIBDIR "${CMAKE_INSTALL_LIBDIR}")
-  else()
-    set(PKG_CONFIG_LIBDIR "\${prefix}/${CMAKE_INSTALL_LIBDIR}")
-  endif()
+if(IS_ABSOLUTE "${CMAKE_INSTALL_LIBDIR}")
+  set(PKG_CONFIG_LIBDIR "${CMAKE_INSTALL_LIBDIR}")
+else()
+  set(PKG_CONFIG_LIBDIR "\${prefix}/${CMAKE_INSTALL_LIBDIR}")
+endif()
 
-  configure_file(
-    "${CMAKE_CURRENT_SOURCE_DIR}/src/openjph.pc.in"
-    "${CMAKE_BINARY_DIR}/${PROJECT_NAME}.pc"
-    @ONLY
-  )
+configure_file(
+  "${CMAKE_CURRENT_SOURCE_DIR}/src/openjph.pc.in"
+  "${CMAKE_BINARY_DIR}/${PROJECT_NAME}.pc"
+  @ONLY
+)
 
-  install(FILES "${CMAKE_BINARY_DIR}/${PROJECT_NAME}.pc"
-    DESTINATION ${CMAKE_INSTALL_LIBDIR}/pkgconfig
-  )
+install(FILES "${CMAKE_BINARY_DIR}/${PROJECT_NAME}.pc"
+  DESTINATION ${CMAKE_INSTALL_LIBDIR}/pkgconfig
+)
 endif()
 
 ################################################################################################
-# Testing (OJPH_BUILD_TESTS)
+# Testing and fuzzing (OJPH_BUILD_TESTS)
 ################################################################################################
 
 if(CMAKE_PROJECT_NAME STREQUAL PROJECT_NAME AND OJPH_BUILD_TESTS)
   enable_testing()
   add_subdirectory(tests)
 endif()
+
+################################################################################################
+# Testing and fuzzing (OJPH_BUILD_FUZZER)
+################################################################################################
+
+if(OJPH_BUILD_FUZZER)
+  add_subdirectory(fuzzing)
+endif()
+

{openexr-3.4.13 → openexr-3.4.14}/external/OpenJPH/README.md

@@ -18,7 +18,7 @@ The standard is available free of charge from [ITU website](https://www.itu.int/
 * [Usage Example](./docs/usage_examples.md)
 * [Web-based Demos](./docs/web_demos.md)
 * [Doxygen Documentation Style](./docs/doxygen_style.md)
+* [OSS-Fuzzing](./docs/fuzzing.md)
 
 # Repositories #
 [![Packaging status](https://repology.org/badge/vertical-allrepos/openjph.svg)](https://repology.org/project/openjph/versions)
-

{openexr-3.4.13 → openexr-3.4.14}/external/OpenJPH/src/core/CMakeLists.txt

@@ -5,11 +5,13 @@ file(GLOB CODESTREAM_SSE2  "codestream/*_sse2.cpp")
 file(GLOB CODESTREAM_AVX   "codestream/*_avx.cpp")
 file(GLOB CODESTREAM_AVX2  "codestream/*_avx2.cpp")
 file(GLOB CODESTREAM_WASM  "codestream/*_wasm.cpp")
+file(GLOB CODESTREAM_VSX   "codestream/*_vsx.cpp")
 file(GLOB CODING           "coding/*.cpp" "coding/*.h")
 file(GLOB CODING_SSSE3     "coding/*_ssse3.cpp")
 file(GLOB CODING_WASM      "coding/*_wasm.cpp")
 file(GLOB CODING_AVX2      "coding/*_avx2.cpp")
 file(GLOB CODING_AVX512    "coding/*_avx512.cpp")
+file(GLOB CODING_VSX       "coding/*_vsx.cpp")
 file(GLOB COMMON           "openjph/*.h")
 file(GLOB OTHERS           "others/*.cpp" "others/*.c")
 file(GLOB TRANSFORM        "transform/*.cpp" "transform/*.h")
@@ -19,10 +21,11 @@ file(GLOB TRANSFORM_AVX    "transform/*_avx.cpp")
 file(GLOB TRANSFORM_AVX2   "transform/*_avx2.cpp")
 file(GLOB TRANSFORM_AVX512 "transform/*_avx512.cpp")
 file(GLOB TRANSFORM_WASM   "transform/*_wasm.cpp")
+file(GLOB TRANSFORM_VSX    "transform/*_vsx.cpp")
 
-list(REMOVE_ITEM CODESTREAM ${CODESTREAM_SSE} ${CODESTREAM_SSE2} ${CODESTREAM_AVX} ${CODESTREAM_AVX2} ${CODESTREAM_WASM})
-list(REMOVE_ITEM CODING ${CODING_SSSE3} ${CODING_WASM} ${CODING_AVX2} ${CODING_AVX512})
-list(REMOVE_ITEM TRANSFORM ${TRANSFORM_SSE} ${TRANSFORM_SSE2} ${TRANSFORM_AVX} ${TRANSFORM_AVX2} ${TRANSFORM_AVX512} ${TRANSFORM_WASM})
+list(REMOVE_ITEM CODESTREAM ${CODESTREAM_SSE} ${CODESTREAM_SSE2} ${CODESTREAM_AVX} ${CODESTREAM_AVX2} ${CODESTREAM_WASM} ${CODESTREAM_VSX})
+list(REMOVE_ITEM CODING ${CODING_SSSE3} ${CODING_WASM} ${CODING_AVX2} ${CODING_AVX512} ${CODING_VSX})
+list(REMOVE_ITEM TRANSFORM ${TRANSFORM_SSE} ${TRANSFORM_SSE2} ${TRANSFORM_AVX} ${TRANSFORM_AVX2} ${TRANSFORM_AVX512} ${TRANSFORM_WASM} ${TRANSFORM_VSX})
 list(APPEND SOURCES ${CODESTREAM} ${CODING} ${COMMON} ${OTHERS} ${TRANSFORM})
 
 source_group("codestream"        FILES ${CODESTREAM})
@@ -112,6 +115,24 @@ else()
 
     endif()
 
+    if (("${OJPH_TARGET_ARCH}" MATCHES "OJPH_ARCH_PPC64")
+        AND (CMAKE_SYSTEM_PROCESSOR MATCHES "ppc64le|powerpc64le"))
+      if (NOT OJPH_DISABLE_SIMD)
+        # native 128-bit VSX kernels (see ojph_simd_vsx.h).  Supported
+        # targets are POWER9 (ISA 3.0) and newer, little-endian only.
+        # The block decoder dispatch is selective; see
+        # ojph_codeblock_fun.cpp.
+        list(APPEND SOURCES ${CODESTREAM_VSX} ${CODING_VSX} ${TRANSFORM_VSX})
+        source_group("codestream" FILES ${CODESTREAM_VSX})
+        source_group("coding" FILES ${CODING_VSX})
+        source_group("transform" FILES ${TRANSFORM_VSX})
+        set_source_files_properties(codestream/ojph_codestream_vsx.cpp PROPERTIES COMPILE_FLAGS "-mcpu=power9")
+        set_source_files_properties(coding/ojph_block_decoder_vsx.cpp PROPERTIES COMPILE_FLAGS "-mcpu=power9")
+        set_source_files_properties(transform/ojph_transform_vsx.cpp PROPERTIES COMPILE_FLAGS "-mcpu=power9")
+        set_source_files_properties(transform/ojph_colour_vsx.cpp PROPERTIES COMPILE_FLAGS "-mcpu=power9")
+      endif()
+    endif()
+
   endif()
 
 endif()
@@ -140,7 +161,11 @@ endif()
 ## include library version/name
 set_target_properties(openjph PROPERTIES POSITION_INDEPENDENT_CODE ON)
 target_compile_definitions(openjph PUBLIC _FILE_OFFSET_BITS=64)
-target_include_directories(openjph PUBLIC $<BUILD_INTERFACE:${CMAKE_CURRENT_SOURCE_DIR}/openjph> $<INSTALL_INTERFACE:include>)
+target_include_directories(openjph PUBLIC
+  $<BUILD_INTERFACE:${CMAKE_CURRENT_SOURCE_DIR}/openjph>
+  $<BUILD_INTERFACE:${CMAKE_CURRENT_SOURCE_DIR}/shared>
+  $<INSTALL_INTERFACE:include>
+)
 
 ## This is to check if aligned_alloc or posix_memalign is available
 # We want the code to compile for C11 and C++11.
@@ -173,13 +198,13 @@ else()
 endif()
 
 if (OJPH_INSTALL)
-  install(TARGETS openjph
-    EXPORT openjph-targets
-  )
-
-  install(DIRECTORY openjph/
-    DESTINATION include/openjph
-    FILES_MATCHING
-    PATTERN "*.h"
-  )
+install(TARGETS openjph
+  EXPORT openjph-targets
+)
+
+install(DIRECTORY openjph/
+  DESTINATION include/openjph
+  FILES_MATCHING
+  PATTERN "*.h"
+)
 endif()

{openexr-3.4.13 → openexr-3.4.14}/external/OpenJPH/src/core/codestream/ojph_bitbuffer_read.h

@@ -40,6 +40,7 @@
 #define OJPH_BITBUFFER_READ_H
 
 #include "ojph_defs.h"
+#include "ojph_arch.h"
 #include "ojph_file.h"
 
 namespace ojph {
@@ -79,7 +80,7 @@ namespace ojph {
     {
       if (bbp->bytes_left > 0)
       {
-        ui32 t = 0;
+        ui8 t = 0;
         if (bbp->file->read(&t, 1) != 1)
           throw "error reading from file";
         bbp->tmp = t;
@@ -195,7 +196,7 @@ namespace ojph {
             ui16 com_len;
             if (bbp->file->read(&com_len, 2) != 2)
               throw "error reading from file";
-            com_len = swap_byte(com_len);
+            com_len = swap_bytes_if_le(com_len);
             if (com_len != 4)
               throw "something is wrong with SOP length";
             int result =