Re: An alternative to gdk-pixbuf

[Ray Strode <halfline gmail com>]

hi,

On Tue, Sep 4, 2018, 6:19 PM Magnus Bergman <magnus bergman snisurset net> wrote:

Over the years it has been discussed from time to time to replace
gdk-pixbuf with something else[1][2].

[...]

I finally took some time to design an
image loading library on top of cairo

[...]

 abydos, which at least
suits my needs. And also some needs mentioned in this list over the
years. First I thought it could suit the needs of GTK+ as well.

So one thing i think a modern image library needs is sandboxing.  the loader should be contained with bubblewrap and it should just give back a chunk of pixels in shared memory as a memfd or similar.

then if it crashes it doesnt take down the app.  if its exploited the most the attacker can do is make the caller show the wrong image (which could still be bad of course)

--Ray