Bug#796270: Please disable jasper support

[Andreas Cadhalpun]

Hi,

On 21.08.2015 00:29, Moritz Muehlenhoff wrote:
> please disable jasper support in gdk-pixbuf. It's an abandoned
> code base with frequent security issues and JPEG2000 is an
> exotic fringe format unused in practice.

I'm strongly in favor of removing jasper support.

> We can keep it in the archive for scientific software etc, but
> let's not expose via gdk-pixbuf to exposed applications like
> Iceweasel.

The frequent crashes libjasper causes in nautilus are quite annoying.

Simply creating a valid jpeg2000 file in a currently opened folder
causes nautilus to crash due to libjasper:
$ ffmpeg -f lavfi -i testsrc=d=0.03 -strict -2 -c jpeg2000 crash.j2k

If you need a jpeg2000 decoder that doesn't crash, try the one
from FFmpeg.

Best regards,
Andreas