Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cisco-hosted 2.4.1 library reports version 2.4.0 #3728

Closed
torokati44 opened this issue Feb 4, 2024 · 10 comments
Closed

Cisco-hosted 2.4.1 library reports version 2.4.0 #3728

torokati44 opened this issue Feb 4, 2024 · 10 comments

Comments

@torokati44
Copy link

torokati44 commented Feb 4, 2024

The WelsGetCodecVersion function, when called in libopenh264-2.4.1-linux64.7.so file - as linked from https://github.com/cisco/openh264/releases/tag/v2.4.1 -, returns version 2.4.0.2310.
Was that built before #3724 perhaps?
This makes it difficult to check/verify that the appropriate version got deployed and loaded.

To make sure the dynamic linker and loader don't pick up any other file with a different version installed on my system, I tested it like this:

Expand...
// openh264versiontest.c
#include <stdio.h>
#include <stdlib.h>
#include <dlfcn.h>

#include "codec_api.h"

int main() {
    void *handle = dlopen("./libopenh264-2.4.1-linux64.7.so", RTLD_LAZY);
    OpenH264Version (*WelsGetCodecVersion)(void) = dlsym(handle, "WelsGetCodecVersion");
    OpenH264Version ver = WelsGetCodecVersion();
    printf("OpenH264 version: %d.%d.%d.%d\n", ver.uMajor, ver.uMinor, ver.uRevision, ver.uReserved);
    dlclose(handle);
}

clang openh264versiontest.c -I Downloads/openh264-2.4.1/codec/api/wels/ -o openh264versiontest

@BenzhengZhang
Copy link
Collaborator

BenzhengZhang commented Feb 5, 2024

Sorry for confusion, it was actually built behind #3707 and before #3724. The official package of 2.4.1 will be temporarily set to Pre-release until the correct version information is included in the release. Thank you for discovering this issue.

@mcatanzaro
Copy link
Contributor

Is this why the 2.4.1 binaries have changed? Can you please confirm that the changes I observed in #909 (comment) are expected and not malicious?

It's causing problems; in the future, it would be better to just release 2.4.2 instead rather than respin existing releases. At the very least, please provide some notice so that we know it's not malicious.

@torokati44
Copy link
Author

... in the future, it would be better to just release 2.4.2 instead rather than respin existing releases. At the very least, please provide some notice so that we know it's not malicious.

Again, I agree 100%.

@torokati44
Copy link
Author

Also, could you please confirm that the current 2.4.1 binaries are the final hosted ones, and the release should no longer be marked as "pre-release", @BenzhengZhang?

@mcatanzaro
Copy link
Contributor

It's causing problems;

I am downgrading freedesktop-sdk back to 2.3.1 until Cisco confirms what has happened here (additional context).

@torokati44
Copy link
Author

torokati44 commented Feb 12, 2024

FWIW it was Chinese New Year just the other day, which may explain the delay in response.

@BenzhengZhang
Copy link
Collaborator

BenzhengZhang commented Feb 20, 2024

I can confirm that binary has been officially replaced by Cisco. Please feel free to use it. I have marked it as the latest release and there will be no new changes. @torokati44
@mcatanzaro You can see if there is still a problem of checksum and size not matching.

@torokati44
Copy link
Author

Closing as supposedly fixed. Thank you!

@mcatanzaro
Copy link
Contributor

OK, thanks Benzheng. I will update freedesktop-sdk and GNOME runtimes.

That said, it would be nice if you don't do this again since it breaks existing users. End user systems download the binary directly from Cisco, expecting it to match the original size and hash. We got lucky this time only because we hadn't released the updated OpenH264 to users yet, avoiding a flood of complaints. In the future, it would be better to just bump the version number and re-release.

@BenzhengZhang
Copy link
Collaborator

BenzhengZhang commented Feb 21, 2024

OK, thanks Benzheng. I will update freedesktop-sdk and GNOME runtimes.

That said, it would be nice if you don't do this again since it breaks existing users. End user systems download the binary directly from Cisco, expecting it to match the original size and hash. We got lucky this time only because we hadn't released the updated OpenH264 to users yet, avoiding a flood of complaints. In the future, it would be better to just bump the version number and re-release.

Yes, I agree with your suggestion.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants