explain why not all the Coverity issues are addressed

[imager.git] / Changes

diff --git a/Changes b/Changes
index 3c58eb5706b04193558c1d87299bbef67cdadfd5..6b0795f6c34cda6531a6080aff4f3d2d991e1276 100644 (file)
--- a/Changes
+++ b/Changes
@@ -8,7 +8,8 @@ General changes:
  - map() would corrupt a channel if there was a gap in the arrayref of
    channels.  Detected by Coverity.  CID 185300.
 
-Coverity finally finished a build[1], fix a few problems:
+Coverity finally finished a build[1], fixed several of the problems
+found.  Coverity went down before I could finish working through them.
 
 High severity:
 
@@ -61,7 +62,7 @@ High severity:
    i_get_combine() due to a fencepost error in validating the combine
    number.  CID 185299.
 
-
+Lower severity (according to Coverity):
 
  - avoid an unneeded EXTEND() call when the FT1 has_chars()
    implementation returns 0. CID 185350.
@@ -109,12 +110,29 @@ High severity:
    context object on thread creation.  CID 185294.
 
  - fix an unsigned comparison when converting character code to a
-   glyph index with a NULL character map.  This should be rare.  CID
-   185297.
+   glyph index with a NULL character map when calculating the glyph
+   for display for FT1.  This should be rare.  CID 185297.
+
+ - fix a similar bug when calculating whether a glyph is present for
+   has_chars() for FT1.  CID 185302.
 
  - i_img_info() (C API) no longer tries to handle a NULL image object
    pointer.  CID 185298.
 
+ - re-work testing for size_t overflow for circle/random
+   super-sampling for fountain fills.  CID 185304.
+
+ - don't check if the unsigned size passed to Imager's malloc wrapper
+   (mymalloc) is negative.  Left from when that parameter was signed.
+   CID 185305.
+
+ - make some types larger and add a cast to prevent integer overflows
+   when calculating a palette with median cut for extraordinarily
+   large images.  CID 185306.
+
+ - don't check if the unsigned size supplied to
+   im_set_image_file_limits() is negative.  CID 185307.
+
 [1] The first two build submissions ended up at the end of a ~400
 build queue, and seemed to have been cancelled by Coverity.  A build
 submitted on NYE went through in minutes.