1Name: OpenJPEG 2URL: http://www.openjpeg.org/ 3Version: 2.5.0 (also update in opj_config*) 4Security Critical: yes 5Shipped: yes 6License: 2-clause BSD 7CPEPrefix: cpe:/a:uclouvain:openjpeg:2.5.0 8 9Description: 10JPEG 2000 library. 11 12Local Modifications: 13 140003-dwt-decode.patch: Check array bounds for opj_dwt_decode_1() and friends. 150005-jp2_apply_pclr.patch: Fix out of bounds access. 160006-tcd_init_tile.patch: Fix a divide by zero bug in opj_tcd_init_tile(). 170007-jp2_read_cmap.patch: Fix wrong rendering on greyscale images with index colorspace. 180009-opj_pi_next.patch: Fix potential bad precno value in opj_pi_next* functions. 190011-j2k_update_image_data.patch: Prevent bad signed -> unsigned casting. 200012-mct_sse.patch: Don't use SSE intrinsics in 32-bit builds. 210014-opj_jp2_read_ihdr_leak.patch: Memory leak in opj_jp2_read_ihdr(). 220015-read_SPCod_SPCoc_overflow.patch: Prevent a buffer overflow in opj_j2k_read_SPCod_SPCoc. 230016-read_SQcd_SQcc_overflow.patch: Prevent a buffer overflow in opj_j2k_read_SQcd_SQcc. 240019-tcd_init_tile.patch: Prevent integer overflows during calculation of |l_nb_code_blocks_size|. 250022-jp2_apply_pclr_overflow.patch: Prevent integer overflow in opj_jp2_apply_pclr. 260023-opj_j2k_read_mct_records.patch: Fix opj_j2k_read to prevent heap-use-after-free. 270025-opj_j2k_add_mct_null_data.patch: Check m_data != null before trying to read from it. 280026-use_opj_uint_ceildiv.patch: Remove (OPJ_UINT32)opj_int_ceildiv((OPJ_INT32)a, (OPJ_INT32) b). 290034-opj_malloc.patch: PDFium changes in opj_malloc. 300035-opj_image_data_free.patch: Use the right free function in opj_jp2_apply_pclr. 310039-opj_mqc_renorme.patch: Remove unused opj_mqc_renorme(). 320041-remove_opj_clock.patch: Remove unused opj_clock.h include. 330042-popcnt-windows-arm64.patch: Backport to fix Windows arm64 build. 340043-mel_init.patch: Backport fix for assertion failure in mel_init(). 350044-opj_t1_allocate_buffers.patch: Backport fix for malloc size error in opj_t1_allocate_buffers(). 360045-openjp2-j2k-replace-sprintf-calls-with-snprintf.patch: Replace sprintf with snprintf for macOS 13 SDK compatibility, from https://github.com/uclouvain/openjpeg/pull/1450. 370046-func-ptr-mixup.patch: Prevent mixing up function pointer types. 38