godot/thirdparty
Rémi Verschelde 1b05404dbf jpgd.h: Backport security vulnerabilities fixes from Google Android
Squashed version of https://github.com/richgel999/jpeg-compressor/pull/10
with the line endings fixed (DOS to Unix).

See https://github.com/richgel999/jpeg-compressor/pull/10 and #30952
for details. Relates to CVE-2017-0700.

Fixes #30952.

(cherry picked from commit 5c333270ed)
2019-08-21 11:04:57 +02:00
..
b2d_convexdecomp Move other lone thirdparty files to thirdparty/misc 2017-04-28 21:19:25 +02:00
bullet bullet: Streamline bundling, remove extraneous src/ folder 2018-01-13 14:08:45 +01:00
certs certs: Sync with latest ca-certificates-2018.2.26-2.fc29 2019-06-04 10:30:07 +02:00
enet Update copyright statements to 2019 2019-01-03 11:41:35 +01:00
etc2comp Convert DOS line endings to Unix line endings 2017-11-05 11:37:59 +01:00
fonts Update Hack font to v3.003 2018-04-14 23:11:18 +02:00
freetype Update freetype to 2.8.1 2017-10-10 01:33:39 +09:00
glad glad: Sync with upstream 0.1.16a0 2017-11-30 14:38:34 +07:00
jpeg-compressor jpgd.h: Backport security vulnerabilities fixes from Google Android 2019-08-21 11:04:57 +02:00
libogg libogg: Update to pristine version 1.3.3 2018-01-13 13:00:44 +01:00
libpng libpng: Update to upstream 1.6.37 2019-06-04 10:31:16 +02:00
libsimplewebm Update libwebm 2018-03-29 00:06:05 +02:00
libtheora Convert DOS line endings to Unix line endings 2017-11-05 11:37:59 +01:00
libvorbis Update libvorbis to 1.3.6 2019-06-04 10:31:42 +02:00
libvpx Fix WebM module for HTML5 platform 2019-07-03 17:02:13 +02:00
libwebp libwebp: Sync with upstream 1.0.2 2019-06-04 10:32:43 +02:00
minizip Update minizip to 1.2.11 2019-06-04 11:17:01 +02:00
misc stb: Update to upstream stb_truetype 1.21 and stb_vorbis 1.15 2019-06-04 10:33:47 +02:00
nanosvg nanosvg: Sync with upstream c1f6e20 2019-06-04 11:25:29 +02:00
openssl openssl: Update to pristine 1.0.2s (security update) 2019-06-04 12:21:32 +02:00
opus opus: Update to upstream version 1.1.5 2017-05-28 21:15:14 +02:00
pcre2 Replacement of internal RegEx with PCRE2 2017-08-19 19:29:14 +08:00
pvrtccompressor dds/etc1/pbm/pvr: Make those modules and split thirdparty files 2016-10-15 11:50:39 +02:00
recastnavigation Recast integration. 2017-09-04 21:41:57 +01:00
rtaudio Rename WINRT_ENABLED to UWP_ENABLED 2016-11-03 14:51:08 -02:00
squish Fix #12220: Add Decompress Bc5 to Squish 2017-12-16 15:38:36 +01:00
thekla_atlas Do not use deprecated stuff that only glibc now implements 2019-06-04 11:23:26 +02:00
tinyexr tinyexr: Sync with upstream 65f9859 2019-06-04 11:28:36 +02:00
zlib zlib: Update to upstream version 1.2.11 2017-01-16 17:58:34 +01:00
zstd zstd: Update to pristine 1.3.3 2018-01-13 13:50:59 +01:00
README.md openssl: Update to pristine 1.0.2s (security update) 2019-06-04 12:21:32 +02:00

README.md

Third party libraries

b2d_convexdecomp

The files were adapted to Godot by removing the dependency on b2Math (replacing it by b2Glue.h) and commenting out some verbose printf calls. Upstream code has not changed in 10 years, no need to keep track of changes.

bullet

Files extracted from upstream source:

  • src/* apart from CMakeLists.txt and premake4.lua files
  • LICENSE.txt

certs

File extracted from a recent Fedora install: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem (It can't be extracted directly from the package, as it's generated on the user's system.)

enet

Files extracted from upstream source:

  • all .c files in the main directory (except unix.c win32.c)
  • the include/enet/ folder as enet/ (except unix.h win32.h)
  • LICENSE file

Important: enet.h, host.c, protocol.c have been slightly modified to be usable by godot socket implementation and allow IPv6. Two files (godot.cpp and enet/godot.h) have been added to provide enet socket implementation using Godot classes. It is still possible to build against a system wide ENet but doing so will limit it's functionality to IPv4 only. Check the diff of enet.h, protocol.c, and host.c with the 1.3.13 tarball before the next update.

etc2comp

Files extracted from upstream source:

  • all .cpp and .h files in EtcLib/
  • README.md, LICENSE, AUTHORS

fonts

Noto Sans

Use UI font variant if available, because it has tight vertical metrics and good for UI.

Hack Regular

DroidSans*.ttf

freetype

Files extracted from upstream source:

  • the src/ folder, stripped of the Jamfile files
  • the include/ folder
  • docs/{FTL.TXT,LICENSE.TXT}

glad

The files we package are automatically generated. See the header of glad.c for instructions on how to generate them for the GLES version Godot targets.

jpeg-compressor

Files extracted from upstream source:

  • jpgd.{c,h}

libogg

Files extracted from upstream source:

  • src/*.c
  • include/ogg/*.h in ogg/
  • COPYING

libpng

Files extracted from upstream source:

  • all .c and .h files of the main directory, except from example.c and pngtest.c
  • the arm/ folder
  • scripts/pnglibconf.h.prebuilt as pnglibconf.h
  • LICENSE

libsimplewebm

Files extracted from upstream source:

TODO.

libtheora

Files extracted from upstream source:

  • all .c, .h in lib/
  • all .h files in include/theora/ as theora/
  • COPYING and LICENSE

libvorbis

Files extracted from upstream source:

  • src/* except from: lookups.pl, Makefile.*
  • include/vorbis/*.h as vorbis/
  • COPYING

libvpx

Files extracted from upstream source:

TODO.

Important: File libvpx/vpx_dsp/x86/vpx_subpixel_8t_intrin_avx2.c has Godot-made change marked with // -- GODOT -- comments.

libwebp

Files extracted from upstream source:

  • src/* except from: .am, .rc and .in files
  • AUTHORS, COPYING, PATENTS

Important: The files utils/bit_reader_utils.{c,h} have Godot-made changes to ensure they build for Javascript/HTML5. Those changes are marked with // -- GODOT -- comments.

minizip

Files extracted from the upstream source:

  • contrib/minizip/{crypt.h,ioapi.{c,h},zip.{c,h},unzip.{c,h}}

Important: Some files have Godot-made changes for use in core/io. They are marked with /* GODOT start */ and /* GODOT end */ comments and a patch is provided in the minizip/ folder.

misc

Collection of single-file libraries used in Godot components.

core

modules

scene

nanosvg

Files extracted from the upstream source:

  • All .h files in src/
  • LICENSE.txt

openssl

Files extracted from the upstream source:

  • Our openssl/: contains the headers installed in /usr/include/openssl; gather them in the source tarball with make links and cp -f include/openssl/*.h ../openssl/openssl/
  • Our crypto/: copy of upstream crypto/, with some cleanup (see below).
  • Our ssl/: copy of upstream ssl/, with some cleanup (see below).
  • Cleanup:
    find \( -name "Makefile" -o -name "*.S" -o -name "*.bat" -o -name "*.bc" \
      -o -name "*.com" -o -name "*.cnf" -o -name "*.ec" -o -name "*.fre" \
      -o -name "*.gcc" -o -name "*.in" -o -name "*.lnx" -o -name "*.m4" \
      -o -name "*.pl" -o -name "*.pod" -o -name "*.s" -o -name "*.sh" \
      -o -name "*.sol" -o -name "*test*" \) -delete
    cd openssl; for file in *.h; do find ../{crypto,ssl} -name "$file" -delete; done; cd ..
    
    For the rest check the git status and decide.
  • e_os.h
  • MacOS/buildinf.h
  • LICENSE
  • Apply the Godot-specific patches in the patches/ folder (make sure not to commit .orig/.rej files generated by patch).
  • Review openssl/opensslconf.h changes and make sure they make sense for our "one size fits all" config.

opus

Files extracted from upstream source:

  • all .c and .h files in src/ (both opus and opusfile), except opus_demo.c
  • all .h files in include/ (both opus and opusfile) as opus/
  • celt/ and silk/ subfolders
  • COPYING

pcre2

Files extracted from upstream source:

  • Files listed in NON-AUTOTOOLS-BUILD steps 1-4
  • All .h files in src/
  • src/pcre2_jit_.c and src/sljit/
  • AUTHORS and COPYING

pvrtccompressor

Files extracted from upstream source:

  • all .cpp and .h files apart from main.cpp
  • LICENSE.TXT

recastnavigation

Files extracted from upstream source:

  • Recast/ folder
  • License.txt

rtaudio

Files extracted from upstream source:

  • RtAudio.{cpp,h}

squish

Files extracted from upstream source:

  • all .cpp, .h and .inl files

Important: Some files have Godot-made changes. They are marked with // -- GODOT start -- and // -- GODOT end -- comments and a patch is provided in the squish/ folder.

thekla_atlas

Files extracted from the upstream source:

  • Relevant sources from src/
  • LICENSE, ATTRIBUTION

Important: Some files have Godot-made changes, those changes are marked with // -- GODOT -- comments and patches are provided to reapply them.

tinyexr

Files extracted from upstream source:

  • tinyexr.{cc,h}

zlib

Files extracted from upstream source:

  • all .c and .h files

zstd

Files extracted from upstream source:

  • lib/{common/,compress/,decompress/,zstd.h}
  • LICENSE