Use wuffs for fast & secure ZIP/LZW decoding/encoding

[syoyo]

Describe the issue

wuffs is a fast, secure and portable algorithm library(zip, huffman decoding for LZW, etc)

https://github.com/google/wuffs

Currently TinyEXR uses codes from OpenEXR, which is not optimized, difficult to interpret code(hard to apply fixes found by fuzzers), and also not secure(although various fixes already added in TinyEXR thanks to fuzzer)

replacing such code part with wuffs would make TinyEXR more faster, secure and portable.

This change also open the possiblity to relicense TinyEXR to MIT or Apache 2.0 by removing OpenEXR code part. (We also need to rewrite PIZ and other pixel encodings though)

To Reproduce

N/A

Expected behavior

TinyEXR becode faster, secure and portable.

Environment

N/A

[meshula]

In case it is of interest, we recently switched OpenEXR from using zlib, to using libdeflate.

A nice aspect of libdeflate is that we can use it as a pseudo-single-file library; in fact the same is true for the OpenEXRCore C core.

https://github.com/PixarAnimationStudios/OpenUSD/blob/release/pxr/imaging/hio/OpenEXR/OpenEXRCoreUnity.h

The interesting bit is that you can incorporate the sources of libdeflate as follows:

#include "deflate/lib/lib_common.h"
#include "deflate/common_defs.h"
#include "deflate/lib/utils.c"
#include "deflate/lib/arm/cpu_features.c"
#include "deflate/lib/x86/cpu_features.c"
#include "deflate/lib/deflate_compress.c"
#undef BITBUF_NBITS
#include "deflate/lib/deflate_decompress.c"
#include "deflate/lib/adler32.c"
#include "deflate/lib/zlib_compress.c"
#include "deflate/lib/zlib_decompress.c"

and thus eliminate the need to have a separate library build and link.

[syoyo]

hoho,

I have forget to mention to this issue. TinyEXR now started to add nanozlib(based on wuffs) for ZIP decoding.

https://github.com/syoyo/tinyexr/commit/9bad737d626608e086d8dc7c129a7bfadd6fe6f2

[meshula]

Ah, cool :) I thought it was still under investigation.