https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294850
Mikhail T. <[email protected]> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|New |In Progress
--- Comment #4 from Mikhail T. <[email protected]> ---
(In reply to Max Brazhnikov from comment #3)
> See for details: https://github.com/mircomir/jxrlib
Yes, and they incorporated our compiler-warning patches too now:
https://github.com/mircomir/jxrlib/pull/16
But our little test.sh is failing now -- a simple BMP->JXR->BMP conversion
produces a file, that's different from the original. This is something,
mircomir's repository inherited from the 4creaters:
https://github.com/4creators/jxrlib/issues/11
I'm happy, that the code's got an active maintainer -- and appreciate adridg@'s
raising my awareness -- but there is a lot of work for these maintainers to do.
Some of the code even still has Microsoft's EOLs in it! It has no obvious
self-testing, no CI/CD, and does not even accept bug-reports (only
merge-requests)...
The sole security problem I found solved is a potential DOS-attack (and the fix
seems somewhat crude, to be honest). Nothing to ignore, but shouldn't be a
show-stopper either.
Once I figure out, how to perform even a simple test properly, I'll update the
port. But, as I said earlier, this should not be a blocker for incorporating
the library into anything...
--
You are receiving this mail because:
You are the assignee for the bug.
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.