forked from blender/blender
Julian Squires
466eb426ed
The use of wordexp(3) permits arbitrary code execution from manually-crafted
glTF files. See https://github.com/syoyo/tinygltf/issues/368 for more details.
In practice this shouldn't be an issue for Blender since the GlTF data isn't
manually crafted but from the OpenXR runtime (a bit like a driver). But
updating the library to include the fix is not a big deal anyway.
Note that the warning that required the local modification is no longer present upstream since
|
||
|---|---|---|
| .. | ||
| Eigen3 | ||
| audaspace | ||
| binreloc | ||
| bullet2 | ||
| ceres | ||
| clew | ||
| cuew | ||
| curve_fit_nd | ||
| draco | ||
| fast_float | ||
| fmtlib | ||
| gflags | ||
| glew-es/include/GL | ||
| glog | ||
| gmock | ||
| gtest | ||
| hipew | ||
| json | ||
| lzma | ||
| lzo | ||
| mantaflow | ||
| nanosvg | ||
| quadriflow | ||
| rangetree | ||
| sdlew | ||
| smaa_areatex | ||
| tinygltf | ||
| vulkan_memory_allocator | ||
| wcwidth | ||
| xdnd | ||
| .clang-format | ||
| CMakeLists.txt | ||
| README | ||
README
When updating a library remember to: * Update the README.blender with the corresponding version. * Update the THIRD-PARTY-LICENSE.txt document