Bug 97628

Summary:	CxImage component needs update
Product:	Spice	Reporter:	Frediano Ziglio <fziglio>
Component:	win32 agent	Assignee:	Spice Bug List <spice-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	medium	CC:	fziglio
Version:	unspecified
Hardware:	Other
OS:	Windows (All)
Whiteboard:
i915 platform:		i915 features:

Description Frediano Ziglio 2016-09-07 12:26:20 UTC

We are still relaying on CxImage to copy from/to the clipboard. Beside we use very few features/formats of this library (basically Windows handle from/to raw bmp/png) we are still using version 6.00. There are some problems with this version, mostly that the zlib and libpng versions used are obsolete containing security vulnerability in it.
It's not a big issue unless you connect to a malicious server which send some specific crafted images.
One problem is that even the last version (7.02) use old versions of these libraries.

Comment 1 Frediano Ziglio 2018-01-18 23:33:25 UTC

We remove CxImage dependency and use directly libpng

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.