OpenEXR 3.4.7__tar.gz → 3.4.8__tar.gz

{openexr-3.4.7 → openexr-3.4.8}/CHANGES.md

@@ -3,6 +3,7 @@
 
 # OpenEXR Release Notes
 
+* [Version 3.4.8](#version-348-march-26-2026) March 26, 2026
 * [Version 3.4.7](#version-347-march-15-2026) March 15, 2026
 * [Version 3.4.6](#version-346-march-1-2026) March 1, 2026
 * [Version 3.4.5](#version-345-february-21-2026) February 21, 2026
@@ -90,6 +91,54 @@
 * [Version 1.0.1](#version-101)
 * [Version 1.0](#version-10)
 
+## Version 3.4.8 (March 26, 2026)
+
+Patch release with several bug/build fixes:
+
+- Fix an integer-overflow bug reading malformed files compressed with
+  B44A/B44B 
+- Fix a buffer-overrun bug reading malformed files compressed with PXR24
+- Fix a bug compressing half data with ZIPS/ZIP data when the
+  compressed size equals packed size
+- Single part files no longer get assigned a part name when writing
+  via the python module
+- Fix a build failure on FreeBSD involving `threads.h`
+
+This also eliminates several compiler warnings, particularly about the
+deprecated `isOptimizationEnabled()` API and deprecates standard
+attributes. 
+
+### Merged Pull Requests
+
+* [2312](https://github.com/AcademySoftwareFoundation/openexr/pull/2312)
+Fix B44/B44A integer overflow: use uint64_t for row offset
+* [2310](https://github.com/AcademySoftwareFoundation/openexr/pull/2310)
+PXR24: reject zlib output that does not match packed payload size
+* [2307](https://github.com/AcademySoftwareFoundation/openexr/pull/2307)
+Fix ZIPS/ZIP encoder corruption when compressed size equals packed size
+* [2303](https://github.com/AcademySoftwareFoundation/openexr/pull/2303)
+Fix MinGW -Walloc-size-larger-than= in general_attr string test
+* [2301](https://github.com/AcademySoftwareFoundation/openexr/pull/2301)
+don't insert name attributes into single part files
+* [2300](https://github.com/AcademySoftwareFoundation/openexr/pull/2300)
+Fix FreeBSD build failure involving threads.h, and add FreeBSD CI build
+* [2124](https://github.com/AcademySoftwareFoundation/openexr/pull/2124)
+Suppress deprecation warnings for isOptimizationEnabled and standard attributes
+
+### Merged Workflow Pull Requests
+
+* [2315](https://github.com/AcademySoftwareFoundation/openexr/pull/2315)
+Force macos cibuildwheel to use Xcode clang
+* [2311](https://github.com/AcademySoftwareFoundation/openexr/pull/2311)
+Bump actions/cache from 5.0.3 to 5.0.4
+* [2304](https://github.com/AcademySoftwareFoundation/openexr/pull/2304)
+Bump github/codeql-action from 4.32.6 to 4.33.0
+* [2297](https://github.com/AcademySoftwareFoundation/openexr/pull/2297)
+Restore Analysis build
+* [2295](https://github.com/AcademySoftwareFoundation/openexr/pull/2295)
+Restrict workflow permissions for ci_steps, release-sign, and codeql
+* [2294](https://github.com/AcademySoftwareFoundation/openexr/pull/2294)
+Pin pypa/cibuildwheel actions to release sha
 
 ## Version 3.4.7 (March 15, 2026)
 

{openexr-3.4.7 → openexr-3.4.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: OpenEXR
-Version: 3.4.7
+Version: 3.4.8
 Summary: Python bindings for the OpenEXR image file format
 Author-Email: Contributors to the OpenEXR project <info@openexr.com>
 Project-URL: Homepage, https://openexr.com

{openexr-3.4.7 → openexr-3.4.8}/pyproject.toml

@@ -89,3 +89,6 @@ manylinux-aarch64-image = "manylinux2014"
 # Needed for full C++17 support
 [tool.cibuildwheel.macos.environment]
 MACOSX_DEPLOYMENT_TARGET = "10.15"
+# pass compilers directly to avoid Homebrew LLVM libunwind
+CMAKE_ARGS = "-DCMAKE_C_COMPILER=/usr/bin/clang -DCMAKE_CXX_COMPILER=/usr/bin/clang++"
+

{openexr-3.4.7 → openexr-3.4.8}/src/lib/OpenEXR/ImfInputPart.cpp

@@ -55,7 +55,21 @@ InputPart::isComplete () const
 bool
 InputPart::isOptimizationEnabled () const
 {
+#if defined(_MSC_VER)
+    __pragma(warning(push))
+    __pragma(warning(disable: 4996))
+#elif defined(__clang__) || defined(__GNUC__)
+    #pragma GCC diagnostic push
+    #pragma GCC diagnostic ignored "-Wdeprecated-declarations"
+#endif
+
     return file->isOptimizationEnabled ();
+
+#if defined(_MSC_VER)
+    __pragma(warning(pop))
+#elif defined(__clang__) || defined(__GNUC__)
+    #pragma GCC diagnostic pop
+#endif
 }
 
 void

{openexr-3.4.7 → openexr-3.4.8}/src/lib/OpenEXR/ImfInputPart.h

@@ -34,6 +34,7 @@ public:
     const FrameBuffer& frameBuffer () const;
     IMF_EXPORT
     bool isComplete () const;
+    OPENEXR_DEPRECATED ("No longer meaningful")
     IMF_EXPORT
     bool isOptimizationEnabled () const;
     IMF_EXPORT

{openexr-3.4.7 → openexr-3.4.8}/src/lib/OpenEXR/ImfScanLineInputFile.h

@@ -110,6 +110,7 @@ public:
     //
     //---------------------------------------------------------------
 
+    OPENEXR_DEPRECATED ("No longer meaningful")
     IMF_EXPORT
     bool isOptimizationEnabled () const;
 

{openexr-3.4.7 → openexr-3.4.8}/src/lib/OpenEXR/ImfStandardAttributes.cpp

@@ -111,13 +111,27 @@ IMF_STD_ATTRIBUTE_IMP (reelName, ReelName, string)
 IMF_STD_ATTRIBUTE_IMP (chromaticities, Chromaticities, Chromaticities)
 IMF_STD_ATTRIBUTE_IMP (whiteLuminance, WhiteLuminance, float)
 IMF_STD_ATTRIBUTE_IMP (adoptedNeutral, AdoptedNeutral, V2f)
+
+#if defined(_MSC_VER)
+    __pragma(warning(push))
+    __pragma(warning(disable: 4996))
+#elif defined(__clang__) || defined(__GNUC__)
+    #pragma GCC diagnostic push
+    #pragma GCC diagnostic ignored "-Wdeprecated-declarations"
+#endif
 IMF_STD_ATTRIBUTE_IMP (renderingTransform, RenderingTransform, string)
 IMF_STD_ATTRIBUTE_IMP (lookModTransform, LookModTransform, string)
+IMF_STD_ATTRIBUTE_IMP (dwaCompressionLevel, DwaCompressionLevel, float)
+#if defined(_MSC_VER)
+    __pragma(warning(pop))
+#elif defined(__clang__) || defined(__GNUC__)
+    #pragma GCC diagnostic pop
+#endif
+
 IMF_STD_ATTRIBUTE_IMP (envmap, Envmap, Envmap)
 IMF_STD_ATTRIBUTE_IMP (wrapmodes, Wrapmodes, string)
 IMF_STD_ATTRIBUTE_IMP (multiView, MultiView, StringVector)
 IMF_STD_ATTRIBUTE_IMP (deepImageState, DeepImageState, DeepImageState)
-IMF_STD_ATTRIBUTE_IMP (dwaCompressionLevel, DwaCompressionLevel, float)
 IMF_STD_ATTRIBUTE_IMP (idManifest, IDManifest, CompressedIDManifest)
 IMF_STD_ATTRIBUTE_IMP (colorInteropID, ColorInteropID, string)
 

{openexr-3.4.7 → openexr-3.4.8}/src/lib/OpenEXRCore/compression.c

@@ -201,7 +201,11 @@ exr_uncompress_buffer (
         }
         else if (res == LIBDEFLATE_SHORT_OUTPUT)
         {
-            /* TODO: is this an error? */
+            /* Decompression succeeded; *actual_out is the byte count. This is
+             * not an error when out_bytes_avail exceeds the true uncompressed
+             * size (e.g. PXR24/ZIP use padded scratch buffers). Callers that
+             * need an exact payload size must compare *actual_out (see e.g.
+             * undo_pxr24_impl). */
             return EXR_ERR_SUCCESS;
         }
         return EXR_ERR_CORRUPT_CHUNK;

{openexr-3.4.7 → openexr-3.4.8}/src/lib/OpenEXRCore/internal_b44.c

@@ -427,13 +427,13 @@ compress_b44_impl (exr_encode_pipeline_t* encode, int flat_field)
             // rightmost column and the bottom row.
             //
             uint16_t *row0, *row1, *row2, *row3;
+            /* row offset in elements: use uint64_t so y*nx cannot overflow int */
+            uint64_t row_off = (uint64_t) (y) * (uint64_t) (nx);
 
-            row0 = (uint16_t*) scratch;
-            row0 += y * nx;
-
-            row1 = row0 + nx;
-            row2 = row1 + nx;
-            row3 = row2 + nx;
+            row0 = (uint16_t*) scratch + row_off;
+            row1 = row0 + (uint64_t) nx;
+            row2 = row1 + (uint64_t) nx;
+            row3 = row2 + (uint64_t) nx;
 
             if (y + 3 >= ny)
             {
@@ -557,11 +557,12 @@ uncompress_b44_impl (
 
         for (int y = 0; y < ny; y += 4)
         {
-            row0 = (uint16_t*) scratch;
-            row0 += y * nx;
-            row1 = row0 + nx;
-            row2 = row1 + nx;
-            row3 = row2 + nx;
+            /* row offset in elements: use uint64_t so y*nx cannot overflow int */
+            uint64_t row_off = (uint64_t) (y) * (uint64_t) (nx);
+            row0 = (uint16_t*) scratch + row_off;
+            row1 = row0 + (uint64_t) nx;
+            row2 = row1 + (uint64_t) nx;
+            row3 = row2 + (uint64_t) nx;
             for (int x = 0; x < nx; x += 4)
             {
                 if (bIn + 3 > comp_buf_size) return EXR_ERR_OUT_OF_MEMORY;

{openexr-3.4.7 → openexr-3.4.8}/src/lib/OpenEXRCore/internal_pxr24.c

@@ -320,7 +320,7 @@ undo_pxr24_impl (
                     ptr[3] = lastIn;
                     lastIn += w;
 
-                    if (nDec + nBytes > uncompressed_size)
+                    if (nDec + nBytes > outSize)
                         return EXR_ERR_CORRUPT_CHUNK;
 
                     for (int x = 0; x < w; ++x)
@@ -347,7 +347,7 @@ undo_pxr24_impl (
                     ptr[1] = lastIn;
                     lastIn += w;
 
-                    if (nDec + nBytes > uncompressed_size)
+                    if (nDec + nBytes > outSize)
                         return EXR_ERR_CORRUPT_CHUNK;
 
                     for (int x = 0; x < w; ++x)
@@ -374,7 +374,7 @@ undo_pxr24_impl (
                     ptr[2] = lastIn;
                     lastIn += w;
 
-                    if (nDec + (uint64_t) (w * 3) > uncompressed_size)
+                    if (nDec + (uint64_t) (w * 3) > outSize)
                         return EXR_ERR_CORRUPT_CHUNK;
 
                     for (int x = 0; x < w; ++x)

{openexr-3.4.7 → openexr-3.4.8}/src/lib/OpenEXRCore/internal_thread.h

@@ -29,9 +29,10 @@ call_once (once_flag* flag, void (*func) (void))
 {
     InitOnceExecuteOnce (flag, once_init_fn, (PVOID) func, NULL);
 }
-#    elif __has_include(<threads.h>)
+#    elif __has_include(<threads.h>) && !defined(__FreeBSD__)
 /*
- * On Linux (glibc 2.28+), use standard <threads.h>
+ * On Linux (glibc 2.28+), use standard <threads.h>.
+ * FreeBSD requires -lstdthreads for <threads.h>; use pthread fallback instead.
  */
 #        include <threads.h>
 

{openexr-3.4.7 → openexr-3.4.8}/src/lib/OpenEXRCore/internal_zip.c

@@ -374,7 +374,7 @@ apply_zip_impl (exr_encode_pipeline_t* encode)
 
     if (rv == EXR_ERR_SUCCESS)
     {
-        if (compbufsz > encode->packed_bytes)
+        if (compbufsz >= encode->packed_bytes)
         {
             memcpy (
                 encode->compressed_buffer,

{openexr-3.4.7 → openexr-3.4.8}/src/lib/OpenEXRCore/openexr_version.h

@@ -10,6 +10,6 @@
 
 #    define OPENEXR_VERSION_MAJOR 3
 #    define OPENEXR_VERSION_MINOR 4
-#    define OPENEXR_VERSION_PATCH 7
+#    define OPENEXR_VERSION_PATCH 8
 
 #endif

{openexr-3.4.7 → openexr-3.4.8}/src/test/OpenEXRCoreTest/general_attr.cpp

@@ -250,7 +250,13 @@ testStringHelper (exr_context_t f)
     EXRCORE_TEST_RVAL (exr_attr_string_destroy (f, &s));
 
     size_t nbytes = (size_t) INT32_MAX + 1;
-    char*  tmp    = (char*) malloc (nbytes + 1);
+#if defined(__SIZEOF_SIZE_T__) && __SIZEOF_SIZE_T__ >= 8
+    char* tmp = (char*) malloc (nbytes + 1);
+#else
+    // 32-bit: nbytes+1 exceeds max object size; skip to avoid -Walloc-size-larger-than=
+    (void) nbytes; // reference nbytes to avoid unused variable warning
+    char* tmp = nullptr;
+#endif
     // might be on a low memory machine, in which case just skip the test
     if (tmp)
     {

{openexr-3.4.7 → openexr-3.4.8}/src/test/OpenEXRTest/CMakeLists.txt

@@ -89,8 +89,6 @@ add_executable(OpenEXRTest
   testMultiView.h
   testNativeFormat.cpp
   testNativeFormat.h
-  testOptimized.cpp
-  testOptimized.h
   testOptimizedInterleavePatterns.cpp
   testOptimizedInterleavePatterns.h
   testPartHelper.cpp
@@ -190,7 +188,6 @@ define_openexr_tests(
  testMultiTiledPartThreading
  testMultiView
  testNativeFormat
- testOptimized
  testOptimizedInterleavePatterns
  testPartHelper
  testPreviewImage

{openexr-3.4.7 → openexr-3.4.8}/src/test/OpenEXRTest/main.cpp

@@ -47,7 +47,6 @@
 #include "testMultiTiledPartThreading.h"
 #include "testMultiView.h"
 #include "testNativeFormat.h"
-#include "testOptimized.h"
 #include "testOptimizedInterleavePatterns.h"
 #include "testPartHelper.h"
 #include "testPreviewImage.h"
@@ -204,7 +203,6 @@ main (int argc, char* argv[])
     TEST (testExistingStreams, "core");
     TEST (testExistingStreamsUTF8, "core");
     TEST (testStandardAttributes, "core");
-    TEST (testOptimized, "basic");
     TEST (testOptimizedInterleavePatterns, "basic");
     TEST (testYca, "basic");
     TEST (testTiledYa, "basic");

{openexr-3.4.7 → openexr-3.4.8}/src/test/OpenEXRTest/testOptimizedInterleavePatterns.cpp

@@ -45,9 +45,8 @@ vector<char>
 vector<char>
     preReadBuffer; // buffer as it was before reading - unread, unfilled channels should be unchanged
 
-int gOptimisedReads = 0;
-int gSuccesses      = 0;
-int gFailures       = 0;
+int gSuccesses = 0;
+int gFailures  = 0;
 
 //
 // @todo Needs a description of what this is used for.
@@ -537,7 +536,7 @@ writefile (Schema& scheme, FrameBuffer& buf, bool tiny, bool allowNonfinite)
     return hdr.dataWindow ();
 }
 
-bool
+void
 readfile (
     Schema       scheme,
     FrameBuffer& buf,     ///< list of channels to read: index to readingBuffer
@@ -564,8 +563,6 @@ readfile (
     infile.readPixels (
         infile.header ().dataWindow ().min.y,
         infile.header ().dataWindow ().max.y);
-
-    return infile.isOptimizationEnabled ();
 }
 
 void
@@ -585,7 +582,7 @@ test (Schema writeScheme, Schema readScheme, bool nonfatal, bool tiny)
     FrameBuffer preReadFrameBuf;
     FrameBuffer postReadFrameBuf;
     cout.flush ();
-    bool opt = readfile (
+    readfile (
         readScheme,
         readFrameBuf,
         preReadFrameBuf,
@@ -594,13 +591,7 @@ test (Schema writeScheme, Schema readScheme, bool nonfatal, bool tiny)
     if (compare (readFrameBuf, writeFrameBuf, dw, nonfatal) &&
         compare (preReadFrameBuf, postReadFrameBuf, dw, nonfatal))
     {
-        cout << " OK ";
-        if (opt)
-        {
-            cout << "OPTIMISED ";
-            gOptimisedReads++;
-        }
-        cout << "\n";
+        cout << " OK\n";
         gSuccesses++;
     }
     else
@@ -618,9 +609,8 @@ runtests (bool nonfatal, bool tiny)
     int i       = 0;
     int skipped = 0;
 
-    gFailures       = 0;
-    gSuccesses      = 0;
-    gOptimisedReads = 0;
+    gFailures  = 0;
+    gSuccesses = 0;
 
     while (Schemes[i]._name != NULL)
     {
@@ -645,7 +635,6 @@ runtests (bool nonfatal, bool tiny)
 
     cout << gFailures << '/' << (gSuccesses + gFailures) << " runs failed\n";
     cout << skipped << " tests skipped (assumed to be bad)\n";
-    cout << gOptimisedReads << '/' << gSuccesses << " optimised\n";
 
     if (gFailures > 0)
     {
@@ -662,12 +651,12 @@ testOptimizedInterleavePatterns (const std::string& tempDir)
     filename = tempDir + "imf_test_interleave_patterns.exr";
 
     cout
-        << "Testing SSE optimisation with different interleave patterns (large images) ... "
+        << "Testing different interleave patterns (large images) ... "
         << endl;
     runtests (false, false);
 
     cout
-        << "Testing SSE optimisation with different interleave patterns (tiny images) ... "
+        << "Testing different interleave patterns (tiny images) ... "
         << endl;
     runtests (false, true);
 

{openexr-3.4.7 → openexr-3.4.8}/src/test/OpenEXRTest/testStandardAttributes.cpp

@@ -899,14 +899,27 @@ generatedFunctions ()
     assert (hasChromaticities (header) == false);
     assert (hasWhiteLuminance (header) == false);
     assert (hasAdoptedNeutral (header) == false);
-    assert (hasRenderingTransform (header) == false);
-    assert (hasLookModTransform (header) == false);
     assert (hasEnvmap (header) == false);
     assert (hasWrapmodes (header) == false);
     assert (hasMultiView (header) == false);
     assert (hasDeepImageState (header) == false);
     assert (hasIDManifest (header) == false);
     assert (hasColorInteropID (header) == false);
+
+#if defined(_MSC_VER)
+    __pragma(warning(push))
+    __pragma(warning(disable: 4996))
+#elif defined(__clang__) || defined(__GNUC__)
+    #pragma GCC diagnostic push
+    #pragma GCC diagnostic ignored "-Wdeprecated-declarations"
+#endif
+    assert (hasRenderingTransform (header) == false);
+    assert (hasLookModTransform (header) == false);
+#if defined(_MSC_VER)
+    __pragma(warning(pop))
+#elif defined(__clang__) || defined(__GNUC__)
+    #pragma GCC diagnostic pop
+#endif
 }
 
 void

{openexr-3.4.7 → openexr-3.4.8}/src/wrappers/python/PyOpenEXR.cpp

@@ -1065,14 +1065,14 @@ PyFile::write(const char* outfilename)
         
         Header header;
 
-        if (P.name().empty() && parts.size() > 1)
+        if (!P.name().empty())
+            header.setName (P.name());
+	else if (parts.size() > 1)
         {
             std::stringstream n;
             n << "Part" << part_index;
             header.setName (n.str());
         }
-        else
-            header.setName (P.name());
 
         //
         // Add attributes from the py::dict to the output header

{openexr-3.4.7 → openexr-3.4.8}/src/wrappers/python/tests/test_unittest.py

@@ -324,6 +324,8 @@ class TestUnittest(unittest.TestCase):
             # Verify reading it back gives the same data
             with OpenEXR.File(outfilename, separate_channels=True) as infile:
                 compare_files (infile, outfile)
+                if "name" in infile.header():
+                   raise Exception(f"name attribute was added to single part half file")
 
         os.remove(outfilename)