Bug 97628 - CxImage component needs update
Summary: CxImage component needs update
Status: RESOLVED FIXED
Alias: None
Product: Spice
Classification: Unclassified
Component: win32 agent (show other bugs)
Version: unspecified
Hardware: Other Windows (All)
: medium normal
Assignee: Spice Bug List
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-09-07 12:26 UTC by Frediano Ziglio
Modified: 2018-01-18 23:33 UTC (History)
1 user (show)

See Also:
i915 platform:
i915 features:


Attachments

Description Frediano Ziglio 2016-09-07 12:26:20 UTC
We are still relaying on CxImage to copy from/to the clipboard. Beside we use very few features/formats of this library (basically Windows handle from/to raw bmp/png) we are still using version 6.00. There are some problems with this version, mostly that the zlib and libpng versions used are obsolete containing security vulnerability in it.
It's not a big issue unless you connect to a malicious server which send some specific crafted images.
One problem is that even the last version (7.02) use old versions of these libraries.
Comment 1 Frediano Ziglio 2018-01-18 23:33:25 UTC
We remove CxImage dependency and use directly libpng


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.