kicad-developers team mailing list archive

[jp charras <jp.charras@xxxxxxxxxx>]

Le 27/11/2017 à 09:00, Maciej Sumiński a écrit :
> I wonder why do we even keep potrace in the source tree. It is available
> in mingw, brew and major Linux distributions, so it does not need to be
> build manually.
> 
> Regards,
> Orson

We need only potrace library source files (only 200Kbytes).
They are not a lot ( 20 / 30 files).

Using potrace lib coming with distros is obviously an option, but it does not fix what is asked:
potrace update ( and it creates one more (minor) dependency for compiling ).

For instance
We are using currently potrace 1.13

potrace 1.15 fixes a few issues of potrace 1.13,  but on mingw the currently potrace version is 1.13

> 
> On 11/27/2017 03:58 AM, Simon Wells wrote:
>> Ummmm I *think* its jp who does the potrace stuff but there has been another security update for pot race, while I realise we are in a freeze I think that security updates should probably be included.
>>
>> "This release consists of bugfixes and minor portability improvements. Some potential buffer overflows and arithmetic overflows were fixed, including CVE-2017-12067. A bug triggered by very large bitmaps has been fixed. A new configuration option --enable-local-getopt was added. Thanks to Agostino Sarubbo, Daniel Macks, and Michael Voříšek for reporting bugs and suggesting improvements.”
>>
>> Simon


-- 
Jean-Pierre CHARRAS