chafa

This is a bugfix release focused on security, hardening and correctness. One of the listed bugs is related to "unreasonable" CLI parameters like output sizes hundreds of thousands of cells wide; while OOB access is always a bug, users are reminded that we don't recommend forwarding CLI parameters from untrusted sources without prior sanitization.

Thanks to everyone who contributed patches and analysis.

• Support BigTIFF images (#328, reported by @govinda-kamath).

• Bug fixes: [unfiled] Integer overflow and OOB write with big output size (@Captainjack-kor). [unfiled] OOB write in symbol-mode Floyd-Steinberg dithering. [unfiled] CLI: Incomplete sanitization of filenames printed to terminal. [unfiled] CLI: Integer overflow in XWD header validation. [unfiled] CLI: Pointer arithmetic past end of GIF file allocation. [unfiled] OOB reading canvas cell colors in FGBG mode. [unfiled] Compiler warnings from headers with C99 and -Wpedantic.

This is a bugfix and quality-of-life release.

• New option: --probe-mode=[any|ctty|stdio]. This specifies whether to probe the terminal through stdio or ctty (usually /dev/tty). Defaults to any, which will probe stdio if it looks like a tty, otherwise the ctty. This allows the terminal to be probed when I/O is redirected (#325, reported by @algometric).

• We now try harder to restore the terminal to a usable state after SIGINT is received, even if we couldn't do a clean exit in a reasonable time frame (#309, reported by @saitoha).

• Bash completions were added and zsh completions updated (#315, @desertstsung).

• Improved compatibility for the Kitty protocol, specifically with iTerm2 (@zouyonghe).

• Bug fixes: #184 Test failure on sparc64 (reported by @cdluminate). #292 Test failure on i386 (reported by @cdluminate). #321 Bad console modes on win32 after exit (reported by @juliannoble). [unfiled] Stalling on closed output pipe on OpenBSD.

This is a feature and bugfix release.

• Increased GLib minimum version to 2.58 (released in 2018).

• New options: --files=FNAME and --files0=FNAME. These allow reading lists of input files from a file or standard input. Paths can be separated by newlines or a zero byte (--files0). These options can be specified multiple times.

• New option: --link=[auto|on|off]. When used with --label, this controls whether each label should be an OSC 8-style hyperlink to its input file.

• Multiple files can now be decoded in parallel. This greatly speeds up grid mode on multi-core systems. Controllable with --threads.

• ConHost support was removed due to incompleteness and lack of interest.

• Image loaders:

  • Added support for CoreGraphics loaders on MacOS (#301, @saitoha).
  • Added support for HEIF files on all platforms (#297).

• Terminal support:

  • Improved detection of ghostty inside tmux (#296, reported by @timsofteng).
  • Added support for GNU/Hurd console.

• Tests:

  • Expanded symbol matching tests with more cases and detailed diagnostics.
  • Added a test for CLI tool return values in various scenarios.

• Bug fixes: #293 Don't leave stdin in non-blocking mode (found by @YanceyChiew). [unfiled] Use glibtoolize when libtoolize is unavailable (@saitoha). [unfiled] GNU/Hurd: Don't stall if pipe is closed on remote end. [unfiled] _mm_empty() not always called immediately after MMX use. [unfiled] FP division by zero possible in sixel palette generation. [unfiled] Don't wait for response if probing is unsupported. [unfiled] Wrong exit code returned on some failures.

This is a bugfix release. It also improves I/O robustness and SVG rendering quality.

• Bug fixes: #288 SVG scaling seems to be done after bitmap conversion (found by @joveian). [unfiled] MinGW: Undeclared function error for strlen() (@carlo-bramini). [unfiled] Assert when using chafa_canvas_draw_all_pixels() with Kitty passthrough (found by @ravachol). [unfiled] Hangs when running with closed stdin (found by @SapphirusBeryl). [unfiled] Potential overrun when output dimension is exactly 1 pixel. [unfiled] Small memory leak on failed load in the grid layout. [unfiled] Occasional warnings from JPEG loader that should not be printed.