Tags

libvdpau versions 1.1 and earlier, when used in setuid or setgid applications,
contain vulnerabilities related to environment variable handling that could
allow an attacker to execute arbitrary code or overwrite arbitrary files.  See
CVE-2015-5198, CVE-2015-5199, and CVE-2015-5200 for more details.

This release uses the secure_getenv() function, when available, to fix these
problems. On platforms where secure_getenv() is not available, libvdpau will use
a fallback implementation.

If you use the NVIDIA .run installer packages, please see
https://devtalk.nvidia.com/default/topic/873035 for additional information.

This release also adds tracing of HEVC picture structures to libvdpau_trace.

This release fixes a bug in the new VdpPictureInfoHEVC structure: the
column_width_minus1 and row_height_minus1 arrays had the wrong dimensions.  To
avoid the incorrect structure being used, the profile numbers for the HEVC
profiles have been changed.  Please use the new profiles rather than the ones
from libvdpau 1.0.

This release adds support for the following HEVC / H.265 profiles:

 VDP_DECODER_PROFILE_HEVC_MAIN
 VDP_DECODER_PROFILE_HEVC_MAIN_10
 VDP_DECODER_PROFILE_HEVC_MAIN_STILL
 VDP_DECODER_PROFILE_HEVC_MAIN_12
 VDP_DECODER_PROFILE_HEVC_MAIN_444

This release adds several new decoder profiles:

 VDP_DECODER_PROFILE_H264_CONSTRAINED_BASELINE
 VDP_DECODER_PROFILE_H264_EXTENDED
 VDP_DECODER_PROFILE_H264_PROGRESSIVE_HIGH
 VDP_DECODER_PROFILE_H264_CONSTRAINED_HIGH
 VDP_DECODER_PROFILE_H264_HIGH_444_PREDICTIVE

In addition, this release includes a number of packaging and compiler warning
fixes and clarifies the ABI policy to include the size of the data structures
defined in vdpau.h.  It also fixes a race condition that could be triggered when
two threads call VdpDeviceCreateX11 simultaneously.

This release fixes an incorrect type for VdpPictureInfo and adds an environment
variable, VDPAU_DRIVER_PATH, which can be used to override the default search
path that the library uses to find its backend driver libraries.

This release fixes a file descriptor leak when the library is initialized, and
adds support for the DRI_PRIME environment variable, so that the appropriate
DRI2 device is queried.

It also fixes a few compile-time warnings and a Coverity dead code warning.

This release fixes building with a nonstandard dri2proto location and fixes (and
adds a test for) a bug that causes XCloseDisplay to crash if the program tries
to create a VDPAU device and then dlcloses libvdpau before closing the display
connection.

Adobe Flash player workarounds, plus a memory leak fix.

Minor documentation updates.

Use DRI2 to query the driver name from the server on a per-X-screen basis.

Move VDPAU drivers to their own module directory.
Build documentation.
Update version defines.

libvdpau 0.2