The GStreamer team is pleased to announce another release of liborc, the Optimized Inner Loop Runtime Compiler, which is used for SIMD acceleration in GStreamer plugins such as audioconvert, audiomixer, compositor, videoscale, and videoconvert, to name just a few.

This is a minor bug-fix release, and also includes a security fix.

Highlights:

• Security: Fix error message printing buffer overflow leading to possible code execution in orcc with specific input files (CVE-2024-40897). This only affects developers and CI environments using orcc, not users of liborc.
• div255w: fix off-by-one error in the implementations
• x86: only run AVX detection if xgetbv is available
• x86: fix AVX detection by implementing the check recommended by Intel
• Only enable JIT compilation on Apple arm64 if running on macOS, fixes crashes on iOS
• Fix potential crash in emulation mode if logging is enabled
• Handle undefined TARGET_OS_OSX correctly
• orconce: Fix typo in GCC __sync-based implementation
• orconce: Fix usage of __STDC_NO_ATOMICS__
• Fix build with MSVC 17.10 + C11
• Support stack unwinding on Windows
• Major opcode and instruction set code clean-ups and refactoring
• Refactor allocation and chunk initialization of code regions
• Fall back to emulation on Linux if JIT support is not available, e.g. because of SELinux sandboxing or noexec mounting)

Direct tarball download: orc-0.4.39.tar.xz.