Add native and nativesdk to BBCLASSEXTEND because python3-pikepdf
requires nativesdk-qpdf.
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This upgrade contains a fix for CVE-2024-47175.
Changelog:
2.1.1:
-pdftops: Use Poppler for a few old Epson laser printers This
works around documents being printed off-centre, shifted towards
the top right. Affected are printers using epsoneplijs:
EPL-5700L, EPL-5800L, EPL-5900L, EPL-6100L, EPL-6200L.
-Fixed bugs discovered by static analyzer OpenScanHub Possible
buffer overflows, uninitialized memory, format string issues
and resource leaks, ...
-Fix crash bugs in ppdLoadAttributes() When parsing the
"*cupsFilter(2): ..." lines in the PPD file use memmove() instead
of strcpy() as the latter does not support handling overlapping
memory portions and do not move running pointer beyond the end
of the input string.
2.1.0:
-Prevent PPD generation based on invalid IPP response Overtaken
from CUPS 2.x: Validate IPP attributes in PPD generator, refactor
make-and-model code, PPDize preset and template names, quote PPD
localized strings. Fixes CVE-2024-47175.
2.1b:
-Added support for libcups3 (libcups of CUPS 3.x) With these changes
libcupsfilters can be built either with libcups2 (libcups of CUPS 2.x)
or libcups3 (libcups of CUPS 3.x).
-Prefer PDF again in PPDs for driverless printers PDF works better with
finishing, especially combinations of multiple copies, collation, and
stapling/binding.
-Use 0.5mm as tolerance when comparing page sizes For the PWG two page
sizes are considered the same when the dimensions differ no more than
0.5 mm, libppd used too tight tolerances.
-PPD generator: Check for required attributes when choosing input format
Check for PCLm and PWG the minimum of attributes which we require
during PPD generation.
-ppdLoadAttributes(): Improve check whether parameters are integer
-ppdLoadAttributes(): Fix crash when page size could not get determined
-Fix crash if there is no page size for "Custom"
-Fix crash when incoming *ptr is NULL
-libcups2 compatibility: Use proper CUPS array callback function types
Fixed CUPS array function call in libcups2 compatibility layer
-Build system: Fix failure to correctly link to zlib Look up zlib
properly with pkg-config
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Gutenprint install hooks run in parallel but depend on each other. This
is a race condition and might trigger a build failure (e.g on AB [0]):
| chmod 700 $WORKDIR/image/usr/libexec/cups/backend/backend_gutenprint
| chmod: cannot access '$WORKDIR/image/usr/libexec/cups/backend/backend_gutenprint': Not a directory
| make[5]: *** [Makefile:2166: install-exec-hook] Error 1
Fixes this by adding an explicit dependency between the dependent
targets.
[0]: https://autobuilder.yoctoproject.org/valkyrie/#/builders/87/builds/46/steps/33/logs/stdio
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Please see
https://git.yoctoproject.org/poky/commit/?id=4dd321f8b83afecd962393101b2a6861275b5265
for what changes are needed, and sed commands that can be used to make them en masse.
I've verified that bitbake -c patch world works with these, but did not run a world
build; the majority of recipes shouldn't need further fixups, but if there are
some that still fall out, they can be fixed in followups.
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Adding UPSTREAM_CHECK_URI fix UNKNOWN_BROKEN status from
running devtool check-upgrade-status.
The next version of the package can be found from upstream
sources.
Signed-off-by: Alexandre Truong <alexandre.truong@smile.fr>
Reviewed-by: Yoann Congal <yoann.congal@smile.fr>
Changelog:
===========
* Rewrite a recursive function to be iterative in linearization to
enable more complex files to be linearized, especially on Windows.
* Avoid non-standard use of 'std::basic_string_view'.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
* Add ENABLE_COVERAGE cmake option to assist with generating
coverage reports.
* From M. Holger: add QPDFObjectHandle::writeJSON to directly
write a JSON representation to a pipeline.
* set the actual value based on the allowable non-/Off value in the normal
appearance dictionary.
* Add fuzz testing for JSON.
* Add JSON::getDictItem (from m-holger)
* Allow --overlay and --underlay to be repeated.
* Add new command-line arguments --file and --range which can be
used within --pages in place of positional arguments.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
* Bug fix: treat references to older generations of objects as null.
* When recovering a file's xref table, attempt to find xref streams if a
traditional trailer dictionary is not found.
* Add --set-page-labels command-line argument and supporting API.
- QPDFJob::Config::setPageLabels
- pdf_page_label_e enumerated type
- QPDFPageLabelDocumentHelper::pageLabelDict
* Support comma-separated numeric values with --collate to select
different group sizes from different files.
* Support "x" before a group in a numeric range to exclude a group
from the previous group. Details are in the manual.
* When flattening annotations, preserve annotations without any appearance
information at all, such as types /Link, /Popup, and /Projection.
* Detect overlong UTF-8 in the UTF-8 decoder, and fix detection of 8-bit
characters in erroneous UTF-8 strings.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
* When running ``cmake --install --component dev``, install cmake files, which were previously omitted from the ``dev`` component
* Fix the Linux binary build to use older libraries so it continues to work in AWS Lambda and other older execution environments.
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- remove autotools remains
- select tls depending on packageconfig instead of doing autoselect
- preselect gnutls because thats the default if both gnutls/openssl are built
- disable the internal tls fallback
- enable pkgconfig
- fix license, it was changed to Apache-2.0
- dont create an additional package just to rdepend on it afterwards
- dont build static lib
- fetch source from git
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- `universal`: Enable `application/vnd.cups-postscript` as input
There are filters which produce this MIME type (such as `hpps` of
HPLIP), and if someone uses such driver on a client and the server
has an IPP Everywhere/driverless printer, the job fails (Pull
request #534).
- beh backend: Use `execv()` instead of `system()` - CVE-2023-24805
With `execv()` command line arguments are passed as separate strings
and not the full command line in a single string. This prevents
arbitrary command execution by escaping the quoting of the arguments
in a job with forged job title.
- beh backend: Extra checks against odd/forged input - CVE-2023-24805
* Do not allow `/` in the scheme of the URI (= backend executable
name), to assure that only backends inside
`/usr/lib/cups/backend/` are used.
* Pre-define scheme buffer to empty string, to be defined for case
of URI being NULL.
* URI must have `:`, to split off scheme, otherwise error.
* Check return value of `snprintf()` to create call path for
backend, to error out on truncation of a too long scheme or on
complete failure due to a completely odd scheme.
- beh backend: Further improvements - CVE-2023-24805
* Use `strncat()` instead of `strncpy()` for getting scheme from
URI, the latter does not require setting terminating zero byte in
case of truncation.
* Also exclude `.` or `..` as scheme, as directories are not valid
CUPS backends.
* Do not use `fprintf()` in `sigterm_handler()`, to not interfere
with a `fprintf()` which could be running in the main process when
`sigterm_handler()` is triggered.
* Use `static volatile int` for global variable job_canceled.
- `parallel` backend: Added missing `#include` lines
- foomatic-rip: Fix a SIGPIPE error when calling gs (Pull request #517)
[Ubuntu's autopkgtest for
foo2zjs](https://autopkgtest.ubuntu.com/packages/f/foo2zjs/lunar/ppc64el)
shows foo2zjs's testsuite failing with cups-filters 2.0beta3 on
ppc64el. This is cause by a timing issue in foomatic-rip which is
fixed now.
- Coverity check done by Zdenek Dohnal for the inclusion of
cups-filters in Fedora and Red Hat. Zdenek has fixed all the issues:
Missing `free()`, files not closed, potential string overflows,
... Thanks a lot! (Pull request #510).
- Dropped all C++ references and obsolete C standards (Pull requests
#504 and #513)
With no C++ compiler needed, there is no need for any checks or
setting for C++ in configure.ac.
- configure.ac: Change deprecated AC_PROG_LIBTOOL for LT_INIT (Pull
request #508)
- texttopdf: Do not include fontconfig.h in the CUPS filter wrapper
- Build system: Do not explicitly check for libpoppler-cpp
The cups-filters package does not contain any code using
libpoppler-cpp, therefore we let ./configure not check for it.
- COPYING, NOTICE: Simplification for autotools-generated files
autotools-generated files can be included under the license of the
upstream code, and FSF copyright added to upstream copyright
list. Simplified COPYING appropriately.
- Makefile.am: Include LICENSE in distribution tarball
- Add templates for issue reports on GitHub. This makes a selection
screen appear when clicking "New Issue" in the web UI, to selct
whether the issue is a regular bug, a feature request, or a security
vulnerability.
- Corrected installation path for *.h files of *.drv files. The ppdc
(and underlying functions) of libppd searches for include files in
/usr/share/ppdc and not in /usr/share/cups/ppdc any more.
- configure.ac: Remove unnecessary "AVAHI_GLIB_..." definitions.
- Makefile.am: Include NOTICE in distribution tarball
- configure.ac: Added "foreign" to to AM_INIT_AUTOMAKE() call. Makes
automake not require a file named README.
- Cleaned up .gitignore
- Tons of fixes in the source code documentation: README.md, INSTALL,
DEVELOPING.md, CONTRIBUTING.md, COPYING, NOTICE, ... Adapted to the
cups-filters component, added links.
- Converted nearly all filters to filter functions, only exceptions
are `rastertoescpx`, `rastertopclx`, `commandtoescpx`,
`commandtopclx`, and `foomatic-rip`. The latter is deeply involved
with Foomatic PPDs and the others are legacy printer drivers. The
filter functions are mainly in libcupsfilters, the ones which
generate PostScript are in libppd.
- Replaced all the filters converted to filter functions by simple
wrapper executables using `ppdFilterCUPSWrapper()` of libppd for
backward compatibility with CUPS 2.x.
- Added new streaming mode triggered by the boolean
"filter-streaming-mode" option. In this mode a filter (function) is
supposed to avoid everything which prevents the job data from
streaming, as loading the whole job (or good part of it) into a
temporary file or into memory, interpreting PDF, pre-checking input
file type or zero-page jobs, ... This is mainly to be used by
Printer Applications when they do raster printing in streaming mode,
to run with lowest resources possible. Currently `foomatic-rip`,
`ghostscript`, and `pdftopdf` got a streaming mode. For the former
two PostScript (not PDF) is assumed as input and no zero-page-job
check is done, in the latter all QPDF processing (page management,
page size adjustment, ...) is skipped and only JCL according to the
PPD added.
- The CUPS filter `imagetops` uses the `ppdFilterImageToPS()` filter
function of libppd now.
- `driverless`, `driverless-fax`: Added IPP Fax Out support. Now
printer setup tools list an additional fax "driver". A fax queue is
created by selecting this driver. Jobs have to be sent with "-o
phone=12345" to supply the destination phone number (Pull request
#280, #293, #296, #302, #304, #305, #306, #309, Issue #298, #308).
- `sys5ippprinter`: Removed `sys5ippprinter`, as CUPS does not support
System V interface scripts any more. This first approach of PPD-less
printing was also not actually made use of.
- `urftopdf`: Removed as we require CUPS 2.2.2+ now which supports
Apple Raster by itself.
- Build system, `README.md`: Require CUPS 2.2.2+. Removed now unneeded
`./configure` switches for use of the `urftopdf` filter for old CUPS
versions.
- Sample PPDs: Renamed source directory from `ppd/` to `ppdfiles/`.
- Build system: Remove '-D_PPD_DEPRECATED=""' from the compiling
command lines of the source files which use libcups. The flag is not
supported any more for longer times already and all the PPD-related
functions deprecated by CUPS have moved into libppd now.
- Build system: Add files in `.gitignore` that are generated by
"autogen.sh", "configure", and "make" (Pull request #336).
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
std::string_view is part of c++17
This fixes:
error: 'std::string_view' has not been declared
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update to version 11.6.3:
- Fix a bug in which qpdf could potentially discard a character
in a binary string if that character was preceded by an octal
escaped string with fewer than three digits. This bug was
introduced in the 11.0.0 release. The bug would not apply to
content streams with default settings.
- The linearization specification precludes linearized files that
require offets past the 4 GB mark. A bug in qpdf was preventing
it from working when offsets had to pass the 2 GB mark. This has
been corrected.
Switch to cmake. Use /dev/random to perform encryption securely.
Change the fully defined path on the target to fix buildpaths
QA issues with libqpdfTargets.cmake. Add openssl and gnutls as
dependencies. Tested with usermerge distro feature and clang.
This work was sponsored by GOVCERT.LU.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The command "bitbake universe -c fetch" currently throws a ton of warnings
as there are many 'impossible' dependencies.
In some cases these variants may never have worked and were just added by copy
and paste of recipes. In some cases they once clearly did work but became
broken somewhere along the way. Users may also be carrying local bbappend files
which add further BBCLASSEXTEND.
Having universe fetch work without warnings is desireable so clean up the broken
variants. Anyone actually needing something dropped here can propose adding it
and the correct functional dependencies back quite easily. This also then
ensures we're not carrying or fixing things nobody uses.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
There is new patch-status QA check in oe-core:
https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a
This is temporary work around just to hide _many_ warnings from
optional patch-status (if you add it to WARN_QA).
This just added
Upstream-Status: Pending
everywhere without actually investigating what's the proper status.
This is just to hide current QA warnings and to catch new .patch files being
added without Upstream-Status, but the number of Pending patches is now terrible:
5 (26%) meta-xfce
6 (50%) meta-perl
15 (42%) meta-webserver
21 (36%) meta-gnome
25 (57%) meta-filesystems
26 (43%) meta-initramfs
45 (45%) meta-python
47 (55%) meta-multimedia
312 (63%) meta-networking
756 (61%) meta-oe
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This recipe currently uses DIRFILES to work around the fact that both
cups and gutenprint ship /etc/cups but with different ownership.
Instead of having mismatching ownership, we can simply match the
ownership in gutenprint.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
There hasn't been a gutenprint upgrade for quite a while, but a lot of
fixes upstream, so grab the latest SHA.
This means we can now do out-of-tree builds, so drop the use of
autotools-brokensep. Also stop autogen.sh from running configure as we
run it again.
Clean up build dependencies.
Enable NLS, as there's no reason to disable it.
Remove the explicit gutenprint-native recipe, instead use class extension
and build as little as possible in the native do_compile.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
ghostscript is not needed at build-time (it only needs to be enabled in the
configuration step) but it is required at run-time for two of this recipe's
packages.
Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The '--enable-ghostscript' configure option is specified twice and doesn't
need to be. It's simply a boolean; it's not the sort of option whose position
is relevant, or an option which modifies its immediate neighbours.
Signed-off-by: Trevor Woerner <twoerner@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
- Switch to github release artifact downloads
- Add missing dependency on libexif
- Merge .inc into .bb as there are no other users of it
Signed-off-by: Khem Raj <raj.khem@gmail.com>
cups-pk-helper is a runtime dependency for gnome-control-center
or system-config-printer.
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update:
"org.cups.cupsd.Notifier.xml" changed to "utils/org.cups.cupsd.Notifier.xml"
"GNU Library" changed to "GNU Library General"
"GNU Lesser" changed to "GNU Lesser General"
Changelog:
URL of issues <https://github.com/OpenPrinting/cups-filters/pull/#####>
=========
Bug fix release, containing backports of many of the bugs recently fixed during
the preparation of the cups-filters 2.x release.
Important is that cups-browsed's queue naming is aligned with CUPS' temporary
queue naming now and several bugs affecting driverless printing are fixed.
-libcupsfilters: Let PPD generator take default ColorModel from printer
(CUPS issue #277).
-Braille: In vectortopdf check inkscape version to call inkscape with the
correct command line (Issue #315, Pull request #443).
-Build system: Make missing DejaVuSans.ttf non-fatal in ./configure as the font
is only needed for test programs, not for actual use of cups-filters
(Issue #411).
-libcupsfilters: In imagetoraster() fixed crash with SGray (Issue #435).
-cups-browsed: Naming of local queues is matched to CUPS' current naming of
temporary queues (no leading or trailing underscores), to avoid duplicates in
print dialogs which support CUPS' temporary queues.
-libcupsfilters: Make cupsRasterParseIPPOptions() work correctly with PPDs
(Issue #436).
-libcupsfilters: Let colord_get_profile_for_device_id() not return empty file
name, to avoid error messages in CUPS error_log.
-foomatic-rip: Debug message was wrongly sent to stdout and not to log
(Issue #422).
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=========
Packaging changes:
-----------------
Pre-built documentation is no longer distributed with the source distribution.
The AppImage and Windows binary distributions still contain embedded
documentation, and a separate doc distribution file is available from the qpdf
release site. Documentation is now available at https://qpdf.readthedocs.io
for every major/minor version starting with version 10.5. Please see Packaging
Documentation for details on how packagers should handle documentation.
The documentation sources have been switched from docbook to reStructuredText
processed with Sphinx. This will break previous documentation links.
A redirect is in place on the main website. A top-to-bottom review of the
documentation is planned for an upcoming release.
Library Enhancements:
--------------------
Since qpdf version 8, using object accessor methods on an instance of
QPDFObjectHandle may create warnings if the object is not of the expected type.
These warnings now have an error code of qpdf_e_object instead of
qpdf_e_damaged_pdf. Also, comments have been added to QPDFObjectHandle.hh to
explain in more detail what the behavior is. See Object Accessor Methods for
a more in-depth discussion.
Add Pl_Buffer::getMallocBuffer() to initialize a buffer allocated with malloc()
for better cross-language interoperability.
C API Enhancements:
-------------------
Many thanks to M. Holger whose contributions have heavily influenced these C
API enhancements. His several suggestions, pull requests, questions, and
critical reading of documentation and comments have resulted in significant
usability improvements to the C API.
Overhaul error handling for the object handle functions C API. Some rare error
conditions that would previously have caused a crash are now trapped and
reported, and the functions that generate them return fallback values.
See comments in the ERROR HANDLING section of include/qpdf/qpdf-c.h for details.
In particular, exceptions thrown by the underlying C++ code when calling object
accessors are caught and converted into errors. The errors can be checked by
calling qpdf_has_error. Use qpdf_silence_errors to prevent the error from being
written to stderr.
Add qpdf_get_last_string_length to the C API to get the length of the last
string that was returned. This is needed to handle strings that contain embedded
null characters.
Add qpdf_oh_is_initialized and qpdf_oh_new_uninitialized to the C API to make it
possible to work with uninitialized objects.
Add qpdf_oh_new_object to the C API. This allows you to clone an object handle.
Add qpdf_get_object_by_id, qpdf_make_indirect_object, and qpdf_replace_object,
exposing the corresponding methods in QPDF and QPDFObjectHandle.
Add several functions for working with pages. See PAGE FUNCTIONS in
include/qpdf/qpdf-c.h for details.
Add several functions for working with streams. See STREAM FUNCTIONS in
include/qpdf/qpdf-c.h for details.
Add qpdf_oh_get_type_code and qpdf_oh_get_type_name.
Add qpdf_oh_get_binary_string_value and qpdf_oh_new_binary_string for making it
easier to deal with strings that contain embedded null characters.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
According to wiki more than 1300 printer drivers.
Specifically the CUPS dye-sublimation backend, used in industrial and
medical is a nice fit when using Yocto for embedded solutions targeting
this segment.
As the gutenprint code generate a tool for string management, the native
recipe is designed to just create the output from this tool (a header
file). So the cross compatible version is depending on native version.
Thought about using BBCLASSEXTEND instead of separate files. Though as
the purpose of the two recipes is different (one for generating header
file, the other for generating the actual lib) and different
dependencies I decided to keep it as two recipes.
Signed-off-by: Claus Stovgaard <clst@ambu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
libtool is now longer renamed to ${host}-libtool, so remove the changes
to support this.
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog is as follows:
Handling of Weak Cryptography Algorithms
From the qpdf CLI, the --allow-weak-crypto is now required to suppress a warning
when explicitly creating PDF files using RC4 encryption. While qpdf will always
retain the ability to read and write such files, doing so will require explicit
acknowledgment moving forward. For qpdf 10.4, this change only affects the
command-line tool. Starting in qpdf 11, there will be small API changes to
require explicit acknowledgment in those cases as well.
Bug Fixes:
Fix potential bounds error when handling shell completion that could occur when
given bogus input.
Properly handle overlay/underlay on completely empty pages (with no resource
dictionary).
Fix crash that could occur under certain conditions when using --pages with
files that had form fields.
Library Enhancements:
Make QPDF::findPage functions public.
Add methods to Pl_Flate to be able to receive warnings on certain recoverable
conditions.
Add an extra check to the library to detect when foreign objects are inserted
directly (instead of using QPDF::copyForeignObject) at the time of insertion
rather than when the file is written. Catching the error sooner makes it much
easier to locate the incorrect code.
CLI Enhancements:
Improve diagnostics around parsing --pages command-line options
Packaging Changes:
The Windows binary distribution is now built with crypto provided by OpenSSL 3.0.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is the result of automated script (0.9.1) conversion:
oe-core/scripts/contrib/convert-overrides.py .
converting the metadata to use ":" as the override character instead of "_".
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
