Imager::Security(3pm) User Contributed Perl Documentation Imager::Security(3pm)NAME
Imager::Security - brief notes on security and image processing
SYNOPSIS
# keep abreast of security updates
apt-get update && apt-get upgrade
yum upgrade
pkgin update && pkgin upgrade
# or local equivalent
# limit memory use
use Imager;
# only images that use up to 10MB
Imager->set_file_limits(bytes => 10_000_000);
DESCRIPTION
There's two basic security considerations when dealing with images from an unknown source:
o keeping your libraries up to date
o limiting the amount of memory used to store images
Keeping libraries up to date
Image file format libraries such as "libpng" or "libtiff" have relatively frequent security updates, keeping your libraries up to date is
basic security.
If you're using user supplied fonts, you will need to keep your font libraries up to date too.
Limiting memory used
With compression, and especially with pointer formats like TIFF, it's possible to store very large images in a relatively small file.
If you're receiving image data from an untrusted source you should limit the amount of memory that Imager can allocate for a read in image
file using the "set_file_limits()" method.
Imager->set_file_limits(bytes => 10_000_000);
You may also want to limit the maximum width and height of images read from files:
Imager->set_file_limits(width => 10_000, height => 10_000,
bytes => 10_000_000);
This has no effect on images created without a file:
# succeeds
my $image = Imager->new(xsize => 10_001, ysize => 10_001);
You can reset to the defaults with:
Imager->set_file_limits(reset => 1);
AUTHOR
Tony Cook <tonyc@cpan.org>
perl v5.14.2 2012-06-04 Imager::Security(3pm)
Check Out this Related Man Page
Imager::Inline(3pm) User Contributed Perl Documentation Imager::Inline(3pm)NAME
Imager::Inline - using Imager with Inline::C.
SYNOPSIS
use Inline with => 'Imager';
use Inline C => <<'EOS';
Imager some_func(Imager::Color c, Imager::Fill f) {
Imager img = i_img_8_new(200, 200, 3);
/* fill with color */
i_box_filled(img, 0, 0, 199, 199, c);
/* inner area with fill */
i_box_cfill(img, 50, 50, 149, 149, f);
return img;
}
EOS
DESCRIPTION
Imager hooks into Inline's "with" syntax to make it easier to write Inline::C code that works with Imager, you can call Imager functions
without having to include headers or perform initialization.
Imager's Inline "with" support does the following:
o add the installed Imager include directory to INC
o add the Imager typemap to TYPEMAPS
o include the headers needed by Imager C extension modules.
o declare and initialize the Imager API function table pointer
o filter the supplied code to replace Imager's class names with those that Inline::C can handle.
LIMITATIONS
The filtering mechanism is global, it will replace the class names even inside string constants. If you need a string matching the name of
one of Imager's classes, like "Imager::Color" you will need to split it into 2 to use C's string pasting mechanism, for example: "Imager:"
":Color".
AUTHOR
Tony Cook <tonyc@cpan.org>
REVISION
$Revision$
SEE ALSO
Imager, Imager::ExtUtils, Imager::API, Imager::APIRef, samples/inline_replace_color.pl
perl v5.14.2 2011-06-06 Imager::Inline(3pm)
It appears there is alot of talk about different utilities that will pull data from PACCT files, sulogs, loginlogs, etc and put it in a format that is easy to read from multiple systems. Has anyone used or recommend any of these? I need to keep track of security on multiple systems running Non-Stop... (3 Replies)
Hi, I'm currently in a Technical Writing class and I decided to do a report on network security. I need a primary source for this and decided that I would poll you fine people on your prefrences in security related software to get said primary source.
1. What webserver would you consider to be... (1 Reply)
this is a pretty good article that is a little dated, but still very informative at freeos.com.
since this is Network Security for Dummies Q&A, maybe this should be the first step for unix.com users to check for general and more specific info on how to 'harden' their linux box.
some of this... (8 Replies)
We have now been living in Vence for 3 months. My husband works for a large IT company.
How do we get hold of our Social Security numbers and Carte Vitale please?
Thanks (4 Replies)
hi,
I need a quick information about storing images into mysql databases.
Is more convenient to store a path to the filesystem folder in which the images are stored, or is possible to directly store the images into my tables ?
thanks (2 Replies)
This may seems simple but I am unaware of this.
Is there anyway to fetch the date & time of a user ID created on AIX? (actually I need answer for HP-UX,Solaris & Linux as well. But AIX is what I am most interested in.)
I use ls command but it does not show the creation date. It just shows the... (2 Replies)
how to store a date into file?
and how we can access date from the file?
---------- Post updated at 06:09 AM ---------- Previous update was at 06:08 AM ----------
how we can store date in file? (1 Reply)