Activity for tkImg

Paul Obermeier committed [r980] on Code

Paul Obermeier — Wed, 04 Mar 2026 20:48:36 -0000

Released version 2.1.1 on 2026/03/04

tkImg updated /tkimg/2.1/tkimg 2.1.1/Img-2.1.1.tar.gz

tkImg — Wed, 04 Mar 2026 20:01:03 -0000

tkImg updated /tkimg/2.1/tkimg 2.1.1/Img-2.1.1.7z

tkImg — Wed, 04 Mar 2026 20:01:03 -0000

tkImg updated /tkimg/2.1/README.md

tkImg — Wed, 04 Mar 2026 19:19:03 -0000

tkImg released /tkimg/2.1/tkimg 2.1.1/Img-2.1.1.tar.gz

tkImg — Wed, 04 Mar 2026 19:18:04 -0000

tkImg released /tkimg/2.1/tkimg 2.1.1/Img-2.1.1.7z

tkImg — Wed, 04 Mar 2026 19:18:04 -0000

Paul Obermeier committed [r979] on Code

Paul Obermeier — Wed, 04 Mar 2026 19:11:01 -0000

Updates for upcoming 2.1.1 release.

Paul Obermeier committed [r978] on Code

Paul Obermeier — Wed, 04 Mar 2026 18:57:25 -0000

Updated libtiff to version 4.7.1.

Paul Obermeier committed [r977] on Code

Paul Obermeier — Wed, 04 Mar 2026 18:47:52 -0000

Updated libpng to version 1.6.55.

Paul Obermeier committed [r976] on Code

Paul Obermeier — Wed, 04 Mar 2026 18:44:39 -0000

Updated libjpeg to version 10.0.

Paul Obermeier committed [r975] on Code

Paul Obermeier — Wed, 04 Mar 2026 18:41:05 -0000

Updated zlib to version 1.3.2.

Paul Obermeier committed [r974] on Code

Paul Obermeier — Thu, 19 Feb 2026 12:41:15 -0000

Changed variable name from "img-be" to "img".

Paul Obermeier committed [r973] on Code

Paul Obermeier — Wed, 18 Feb 2026 20:56:04 -0000

Due to the write algorithm used in XPM parser, color palettes are written in different order on big vs. little endian systems.

Paul Obermeier committed [r972] on Code

Paul Obermeier — Tue, 17 Feb 2026 21:05:01 -0000

Added checks for writing, which is npt supported for FLIR images.

Paul Obermeier committed [r971] on Code

Paul Obermeier — Tue, 17 Feb 2026 19:35:31 -0000

Renamed test constraint "Tk87" to "Tk9", as there was no official Tk 8.7 release.

Paul Obermeier committed [r970] on Code

Paul Obermeier — Tue, 17 Feb 2026 19:30:21 -0000

Updasted Img version to 2.1.1.

Paul Obermeier committed [r969] on Code

Paul Obermeier — Tue, 17 Feb 2026 19:29:12 -0000

Adapted to work correctly on big-endian systems (tested on SGI).

Paul Obermeier committed [r968] on Code

Paul Obermeier — Tue, 17 Feb 2026 19:27:19 -0000

Adapted to work correctly on big-endian systems (tested on SGI).

Paul Obermeier committed [r967] on Code

Paul Obermeier — Tue, 17 Feb 2026 19:26:18 -0000

No need to add TCL_LIBS to SHLIB_LD_LIBS.

Paul Obermeier committed [r966] on Code

Paul Obermeier — Tue, 17 Feb 2026 19:24:38 -0000

Corrected verbose message of "Bytes per line" on big-endian systems.

Paul Obermeier committed [r965] on Code

Paul Obermeier — Tue, 17 Feb 2026 19:23:16 -0000

Adapted to work correctly on big-endian systems (tested on SGI).

Paul Obermeier modified ticket #119

Paul Obermeier — Sat, 06 Dec 2025 20:58:03 -0000

window.c: resources leaked on error in StringRead()

Paul Obermeier posted a comment on ticket #119

Paul Obermeier — Sat, 06 Dec 2025 20:58:03 -0000

Used goto approach. Tested on Windows and Linux.

Paul Obermeier committed [r964] on Code

Paul Obermeier — Sat, 06 Dec 2025 20:56:58 -0000

Issue #119: Corrected resource leaks in StringRead.

Paul Obermeier modified ticket #35

Paul Obermeier — Sat, 06 Dec 2025 19:30:40 -0000

demo.tcl: avoid toolhelp display issue on Tk Aqua 9.0 (macOS)

Paul Obermeier posted a comment on ticket #35

Paul Obermeier — Sat, 06 Dec 2025 19:30:40 -0000

Corrected with commit #963. Your patch did not work. Solved by creating and destroying the tooltip window.

Paul Obermeier committed [r963] on Code

Paul Obermeier — Sat, 06 Dec 2025 19:27:47 -0000

Issue #35: Corrected tooltip display on macOS.

Christopher Chavez created ticket #35

Christopher Chavez — Tue, 02 Dec 2025 02:30:07 -0000

demo.tcl: avoid toolhelp display issue on Tk Aqua 9.0 (macOS)

Christopher Chavez created ticket #119

Christopher Chavez — Tue, 25 Nov 2025 20:38:00 -0000

window.c: resources leaked on error in StringRead()

Paul Obermeier committed [r962] on Code

Paul Obermeier — Tue, 18 Nov 2025 20:46:40 -0000

Improved test, if ghostscript exists and is working.

Paul Obermeier committed [r961] on Code

Paul Obermeier — Sun, 22 Jun 2025 19:04:51 -0000

Released version 2.1.0 on 2025/06/22

Paul Obermeier modified ticket #118

Paul Obermeier — Sun, 22 Jun 2025 18:43:45 -0000

Stack smashing detected on MSYS2/Clang64

Paul Obermeier posted a comment on ticket #118

Paul Obermeier — Sun, 22 Jun 2025 18:43:45 -0000

Fix included in new version 2.1.0.

tkImg released /tkimg/2.1/tkimg 2.1.0/Img-2.1.0.tar.gz

tkImg — Sun, 22 Jun 2025 18:41:02 -0000

tkImg released /tkimg/2.1/tkimg 2.1.0/Img-2.1.0.7z

tkImg — Sun, 22 Jun 2025 18:40:03 -0000

Paul Obermeier committed [r960] on Code

Paul Obermeier — Sun, 22 Jun 2025 18:33:19 -0000

Updates for upcoming 2.1.0 release.

tkImg released /tkimg/2.1/README.md

tkImg — Sun, 22 Jun 2025 18:24:05 -0000

Paul Obermeier committed [r959] on Code

Paul Obermeier — Sat, 21 Jun 2025 21:45:28 -0000

Removed obsolete procedure SetFileTypes.

ofv posted a comment on ticket #118

ofv — Thu, 12 Jun 2025 21:28:01 -0000

For the record, the commit in Mingw-packages is cf52b888301d4e0f66cf5116b0d9f4955876cb54 link to commit in github That commit included the proposed change to tif_ojpeg.c, which I reckon it is unnecessary. Thank you.

Paul Obermeier posted a comment on ticket #118

Paul Obermeier — Thu, 12 Jun 2025 18:44:15 -0000

Checked in tkimg.h with proposed change: #if defined(__MINGW32__) && !defined(__aarch64__) && !defined(__clang__) Works for all of my test systems.

Paul Obermeier committed [r958] on Code

Paul Obermeier — Thu, 12 Jun 2025 18:40:34 -0000

Builtin versions of setjmp/longjmp only needed for mingw64 (gcc/msvcrt).

ofv posted a comment on ticket #118

ofv — Sun, 08 Jun 2025 21:58:34 -0000

Tested with unpatched 2.0.1 on mingw64 (gcc/msvcrt), ucrt64 (gcc/ucrt), clang64 (clang/ucrt), plus patched 2.0.1 (clang/ucrt). Same output as yours on all cases.

Paul Obermeier posted a comment on ticket #118

Paul Obermeier — Sun, 08 Jun 2025 21:11:14 -0000

I used the following script and attached (incorrect) TIFF file for testing. Note, that the TIFF file is marked as suspicious (TIFF.CVE-2017-3042) by the TACHYON virus scanner on VirusTotal. set tkVersion [package require Tk] puts "Tk : $tkVersion ([expr 8 * $tcl_platform(pointerSize)]-bit)" set imgVersion [package require Img] puts "Img: $imgVersion" set f id_003177,src_001927,op_havoc,rep_1.tif puts "Checking $f ..." set retVal [catch {set phImg [image create photo -file $f -format {TIFF -verbose...

ofv posted a comment on ticket #118

ofv — Sun, 08 Jun 2025 20:53:07 -0000

Thanks for the reference. oscar@w10x64-vm-sky CLANG64 /d $ echo | clang -dM -E - | grep clang #define __clang__ 1 #define __clang_literal_encoding__ "UTF-8" #define __clang_major__ 20 #define __clang_minor__ 1 #define __clang_patchlevel__ 5 #define __clang_version__ "20.1.5 " #define __clang_wide_literal_encoding__ "UTF-16" oscar@w10x64-vm-sky CLANG64 /d $ echo | clang -dM -E - | grep -i gnu #define __GNUC_MINOR__ 2 #define __GNUC_PATCHLEVEL__ 1 #define __GNUC_STDC_INLINE__ 1 #define __GNUC__ 4 So...

Paul Obermeier posted a comment on ticket #118

Paul Obermeier — Sun, 08 Jun 2025 19:09:54 -0000

The commit message from 2023-04-23 says: Added macros SETJMP and LONGJMP as workaround for incorrect setjmp and longjmp in MINGW. For a discussion of the error see ex. [https://stackoverflow.com/questions/53709069/setjmp-longjmp-in-x86-64-w64-mingw32] I don't know, which gcc versions are affected by the error. If only "old" compilers are affected (ex. gcc 4.x), a more clean and simple solution would be: #if defined(__MINGW32__) && __GNUC__ < 5 #define SETJMP(jbuf) __builtin_setjmp(jbuf) #define LONGJMP(jbuf,...

ofv posted a comment on ticket #118

ofv — Sun, 08 Jun 2025 15:02:38 -0000

We fixed the problem by applying the patch below. It also modifies tif_ojpeg.c for consistency. Do you remember why mingw32 was changed to use __builtin_setjmp/__builtin_longjmp? Index: base/tkimg.h =================================================================== --- a/base/tkimg.h (revision 957) +++ b/base/tkimg.h (working copy) @@ -24,7 +24,7 @@ # define tkimg_vsnprintf vsnprintf #endif /* _MSC_VER_ */ -#if defined(__MINGW32__) +#if defined(__MINGW32__) && !defined(__aarch64__) && !defined(_UCRT)...

ofv modified a comment on ticket #118

ofv — Sat, 07 Jun 2025 23:34:45 -0000

Changing base/tkimg.h to use plain setjmp/longjmp instead of the __builtin variants removes the crash, as well as the warnings. I'll ask some people about what's going on and come back with a patch. Thank you.

ofv posted a comment on ticket #118

ofv — Sat, 07 Jun 2025 23:33:08 -0000

Changing base/tkimg.h to use plain setjmp/longjmp instead of the __builtin variants removes the crash. I'll ask some people about what's going on and come back with a patch. Thank you.

ofv posted a comment on ticket #118

ofv — Sat, 07 Jun 2025 23:07:23 -0000

This looks like Tk is trying to load the jpg file as if it were a png, isn't it? #0 png_error (png_ptr=png_ptr@entry=0x30fb890, error_message=0x7ff980e71222 <.refptr.png_sRGB_table+1418> "Not a PNG file") at D:/dev/other/tkimg-code/compat/libpng/pngerror.c:82 #1 0x00007ff980e5431e in png_read_sig (png_ptr=png_ptr@entry=0x30fb890, info_ptr=) at D:/dev/other/tkimg-code/compat/libpng/pngrutil.c:139 #2 0x00007ff980e48f1a in png_read_info (png_ptr=0x30fb890, info_ptr=0x7ff980e71222 <.refptr.png_sRGB_table+1418>)...

ofv posted a comment on ticket #118

ofv — Sat, 07 Jun 2025 21:30:54 -0000

I'm using tcl/tk 8.6.16. There are no other extensions loaded, just the code above executed with wish. I tried to replicate the problem in Linux, to no avail, even with Valgrind, but please note that Windows and Linux have different ABIs and different C runtimes. It is interesting that the crash does not happen with the MinGW64 environment (which uses the old MSCVCRT runtime). All packages in MSYS2 (a few thousands of them) are built with -Wp,-D_FORTIFY_SOURCE=2 -fstack-protector-strong and AFAIK...

Paul Obermeier posted a comment on ticket #118

Paul Obermeier — Sat, 07 Jun 2025 20:50:55 -0000

I do not have MSYS2/Clang available, but running tests on Debian using similar compiler options (-fsanitize=address,undefined -Wp,-D_FORTIFY_SOURCE=2 -fstack-protector-strong -mshstk) on current trunk did not show any stack corruptions. Looking at the source of png.c, your first stack trace, where png_ptr is 0x0 in CommonMatch should not be possible, because png_ptr is checked just before calling CommonMatch. I tested with Tcl/Tk 9.0.1. Which version of Tcl/Tk are you using? Are you loading any other...

ofv created ticket #118

ofv — Tue, 03 Jun 2025 10:11:31 -0000

Stack smashing detected on MSYS2/Clang64

Paul Obermeier committed [r957] on Code

Paul Obermeier — Thu, 08 May 2025 21:43:29 -0000

Fixed bug in readInfoHeader.

Paul Obermeier committed [r956] on Code

Paul Obermeier — Thu, 08 May 2025 19:40:34 -0000

Updated libpng to version 1.6.48.

Paul Obermeier committed [r955] on Code

Paul Obermeier — Thu, 08 May 2025 19:35:25 -0000

Added check for PNG sub-images and submit appropriate error message.

Paul Obermeier committed [r954] on Code

Paul Obermeier — Sat, 22 Mar 2025 21:14:52 -0000

Updated copyright date. No code changes.

Paul Obermeier committed [r953] on Code

Paul Obermeier — Fri, 21 Mar 2025 22:13:38 -0000

Adapted copyright date and version number.

Paul Obermeier committed [r952] on Code

Paul Obermeier — Fri, 21 Mar 2025 22:10:17 -0000

Updated version number to 2.1.0.

Paul Obermeier committed [r951] on Code

Paul Obermeier — Fri, 21 Mar 2025 22:04:15 -0000

Added additional test scripts and images for extended RAW functionality.

Paul Obermeier committed [r950] on Code

Paul Obermeier — Fri, 21 Mar 2025 22:01:51 -0000

Added expected results in Readme files.

Paul Obermeier committed [r949] on Code

Paul Obermeier — Fri, 21 Mar 2025 21:59:54 -0000

Renamed RawWriteOptions.tcl to RawCreatePhoto.tcl

Paul Obermeier committed [r948] on Code

Paul Obermeier — Fri, 21 Mar 2025 21:56:24 -0000

Corrected typo in comment.

Paul Obermeier committed [r947] on Code

Paul Obermeier — Fri, 21 Mar 2025 21:55:15 -0000

Corrected file extension from .rgb to .tga.

Paul Obermeier committed [r946] on Code

Paul Obermeier — Fri, 21 Mar 2025 21:55:00 -0000

Corrected file extension from .rgb to .ras.

Paul Obermeier committed [r945] on Code

Paul Obermeier — Fri, 21 Mar 2025 21:52:12 -0000

Extended RAW parser to support 1, 2, 3 and 4 channel files when reading.

Paul Obermeier committed [r944] on Code

Paul Obermeier — Fri, 21 Mar 2025 21:46:25 -0000

Updated libpng to version 1.6.47.

Paul Obermeier committed [r943] on Code

Paul Obermeier — Thu, 26 Dec 2024 22:36:38 -0000

Delete directories testOut after test execution. Added option "--nodelete" to disable deletion.

Paul Obermeier committed [r942] on Code

Paul Obermeier — Sun, 08 Dec 2024 21:14:02 -0000

Released version 2.0.1 on 2024/12/08

tkImg updated /tkimg/2.0/README.md

tkImg — Sun, 08 Dec 2024 20:57:03 -0000

tkImg released /tkimg/2.0/tkimg 2.0.1/Img-2.0.1.7z

tkImg — Sun, 08 Dec 2024 20:56:03 -0000

tkImg released /tkimg/2.0/tkimg 2.0.1/Img-2.0.1.tar.gz

tkImg — Sun, 08 Dec 2024 20:55:03 -0000

Paul Obermeier committed [r941] on Code

Paul Obermeier — Sun, 08 Dec 2024 20:29:21 -0000

Added notes regarding afltests not included in distribution files.

Paul Obermeier committed [r940] on Code

Paul Obermeier — Sun, 08 Dec 2024 20:24:01 -0000

Added empty directory "templates", which is needed by tclssg.

Paul Obermeier committed [r939] on Code

Paul Obermeier — Sun, 08 Dec 2024 19:58:01 -0000

Updates for upcoming 2.0.1 release.

Paul Obermeier committed [r938] on Code

Paul Obermeier — Mon, 02 Dec 2024 21:51:25 -0000

Replaced calls to "package require Tk" and "package version Tk" to determine Tk version number with $::tk_patchLevel.

Paul Obermeier committed [r937] on Code

Paul Obermeier — Mon, 02 Dec 2024 21:48:20 -0000

Added check, if ghostscript interpreter is available.

ryotakatsuki posted a comment on discussion Open Discussion

ryotakatsuki — Fri, 29 Nov 2024 11:26:16 -0000

The problem is not libtiff. The files marked as malicious are in the test images. I created a version of Img-1.4.17 without afltestimgs.7z (I just decompressed, deleted, and recompressed) that have no detections: Img-1.4.17-no-afltestimgs.tar.gz https://www.virustotal.com/gui/file/3eee28c2e6daf343a538d8f7bcbf738dd43808465683f6a0d6962c212f5303d5?nocache=1 And here is just the test images (afltestimgs.7z): afltestimgs.7z https://www.virustotal.com/gui/file/f1b1e7d00ea1358981305c0e3dd3f3238ec977395...

Larry W. Virden posted a comment on discussion Open Discussion

Larry W. Virden — Thu, 28 Nov 2024 16:58:48 -0000

The issue probably is use of liftiff. It used to and perhaps still does have security issues On Thu, Nov 28, 2024, 6:52 AM ryotakatsuki takatsuki@users.sourceforge.net wrote: If you could remove the afltests, it would be awesome :) Thanks! tkImg is marked as malicious by multiple vendors in virustotal https://sourceforge.net/p/tkimg/discussion/172363/thread/4a5438d14c/?limit=25#3dcc/02fc Sent from sourceforge.net because you indicated interest in https://sourceforge.net/p/tkimg/discussion/172363/...

ryotakatsuki posted a comment on discussion Open Discussion

ryotakatsuki — Thu, 28 Nov 2024 11:52:42 -0000

If you could remove the afltests, it would be awesome :) Thanks!

Paul Obermeier posted a comment on discussion Open Discussion

Paul Obermeier — Tue, 26 Nov 2024 19:49:08 -0000

I used the afltest images with great success to find serious bugs in the Img code, but was not aware of any virus detection problems. If removing the above mentioned TIFF image and generating a new 7z file, it still generates detection alarms, so it seems, there are other problematic images in there. As people downloading the tarball will not likely run the extended tests, I can remove the afltests directory from future tarballs.

ryotakatsuki posted a comment on discussion Open Discussion

ryotakatsuki — Tue, 26 Nov 2024 17:01:46 -0000

I don't think any tiff image will trigger the detection. The CVEs mentioned in the detection names are related to a vulnerability that allowed especially crafted tiff images to execute code, so maybe the problematic tiff image is one of those (I assume that it would be for testing purposes).

Larry W. Virden posted a comment on discussion Open Discussion

Larry W. Virden — Tue, 26 Nov 2024 16:39:45 -0000

Hmm an image file of type tiff triggering virus concerns. Is the image something that violates standards? How would one test tiff code support without a tiff image? On Tue, Nov 26, 2024, 9:42 AM ryotakatsuki takatsuki@users.sourceforge.net wrote: Hi, The tarball for more recent 1.4.* versions (at least 1.4.17, 1.4.16 and 1.4.15) is marked as malicious in virustotal: https://www.virustotal.com/gui/file/4607abc6d8aa92f6e4f9b337db1df90e76a2dafdf2d53eff296b68ae63bf81aa The cause seems to be the afltests.zip...

ryotakatsuki posted a comment on discussion Open Discussion

ryotakatsuki — Tue, 26 Nov 2024 14:42:05 -0000

Hi, The tarball for more recent 1.4.* versions (at least 1.4.17, 1.4.16 and 1.4.15) is marked as malicious in virustotal: https://www.virustotal.com/gui/file/4607abc6d8aa92f6e4f9b337db1df90e76a2dafdf2d53eff296b68ae63bf81aa The cause seems to be the afltests.zip file contained in the tests (beause of id_009971,src_009965,op_flip1,pos_8.tif): https://www.virustotal.com/gui/file/f1b1e7d00ea1358981305c0e3dd3f3238ec977395cfd689623283903e57b4205/relations The asset may be used in the tests and be there...

Paul Obermeier committed [r936] on Code

Paul Obermeier — Thu, 14 Nov 2024 18:17:45 -0000

Updated version to 2.0.1.

Jan Nijtmans committed [r935] on Code

Jan Nijtmans — Wed, 13 Nov 2024 14:08:48 -0000

Fix warning in pixmap.c: pixmap.c:208:71: warning: suggest parentheses around arithmetic in operand of ‘|’

Jan Nijtmans committed [r934] on Code

Jan Nijtmans — Wed, 13 Nov 2024 13:21:59 -0000

If USE_FORMAT_VERSION==1, we need at least Tk 8.7. If TK_MINOR_VERSION is not defined, assume Tk 8.7+

Jan Nijtmans committed [r933] on Code

Jan Nijtmans — Tue, 12 Nov 2024 22:44:27 -0000

Add --with-tk8 configuration option

Paul Obermeier committed [r932] on Code

Paul Obermeier — Mon, 28 Oct 2024 21:52:28 -0000

Corrected some comments.

Paul Obermeier committed [r931] on Code

Paul Obermeier — Mon, 28 Oct 2024 21:49:41 -0000

Windows executables got lost in merge.

Paul Obermeier committed [r930] on Code

Paul Obermeier — Mon, 28 Oct 2024 21:48:39 -0000

Changed EOL to Linux.

Paul Obermeier committed [r929] on Code

Paul Obermeier — Mon, 28 Oct 2024 21:46:23 -0000

Changed EOL to Linux.

Paul Obermeier committed [r928] on Code

Paul Obermeier — Mon, 28 Oct 2024 21:43:58 -0000

Changed EOL to Linux.

Paul Obermeier committed [r927] on Code

Paul Obermeier — Mon, 28 Oct 2024 21:32:55 -0000

Merge branch 1.5.X (containing Img version 2.0.0) into trunk.

Paul Obermeier committed [r926] on Code

Paul Obermeier — Mon, 30 Sep 2024 21:38:42 -0000

Create branch for possible 1.4 security fixes.

Paul Obermeier committed [r925] on Code

Paul Obermeier — Mon, 30 Sep 2024 21:35:39 -0000

Released version 2.0.0 on 2024/09/30.

Paul Obermeier committed [r924] on Code

Paul Obermeier — Mon, 30 Sep 2024 19:25:56 -0000

Released version 1.4.17 on 2024/09/30.

Paul Obermeier created a blog post

Paul Obermeier — Mon, 30 Sep 2024 19:10:01 -0000

Announce: Img 2.0.0

tkImg released /tkimg/2.0/tkimg 2.0.0/Img-2.0.0.tar.gz

tkImg — Mon, 30 Sep 2024 18:52:02 -0000

tkImg released /tkimg/2.0/tkimg 2.0.0/Img-2.0.0.7z

tkImg — Mon, 30 Sep 2024 18:52:02 -0000

tkImg released /tkimg/1.4/tkimg 1.4.17/README.txt

tkImg — Mon, 30 Sep 2024 18:50:03 -0000