SCALe Analysis of JasPer Codebase

April 1, 2015 • White Paper

By

David Svoboda

In this paper, David Svoboda provides the findings of a SCALe audit on a codebase.

Publisher

Software Engineering Institute

Topic or Tag

Secure Coding Secure Development

Abstract

This paper provides the results of a SCALe audit on the JasPer codebase, including detailed findings, an analysis of the findings, and details of the audit procedure.

The JasPer codebase is an implementation of the JPEG-2000 Part-1 standard (i.e., ISO/IEC 15444-1) [Jasper]. It is built in C for both Linux and Windows, and is offered under a license similar to the MIT license.