cheng/libpng
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[libpng16] Fixed a potential null pointer dereference in png_set_text_2()

Browse Source 
(bug report and patch by Patrick Keshishian).
This commit is contained in:
Glenn Randers-Pehrson 2016-12-29 07:51:33 -06:00
parent a3b5edc934
commit 812768d7a9
3 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ANNOUNCE
View File

@ -31,6 +31,8 @@ Changes since the last public release (1.6.26):
substitution of an expression itself containing a well-formed defined substitution of an expression itself containing a well-formed defined
operation. operation.
Added ARM support to CMakeLists.txt (Andreas Franek). Added ARM support to CMakeLists.txt (Andreas Franek).
Fixed a potential null pointer dereference in png_set_text_2() (bug report
and patch by Patrick Keshishian).
Send comments/corrections/commendations to png-mng-implement at lists.sf.net Send comments/corrections/commendations to png-mng-implement at lists.sf.net
(subscription required; visit (subscription required; visit

2
CHANGES
View File

@ -5771,6 +5771,8 @@ Version 1.6.27rc01 [December 27, 2016]
Added ARM support to CMakeLists.txt (Andreas Franek). Added ARM support to CMakeLists.txt (Andreas Franek).
Version 1.6.27 [December 29, 2016] Version 1.6.27 [December 29, 2016]
Fixed a potential null pointer dereference in png_set_text_2() (bug report
and patch by Patrick Keshishian)
Send comments/corrections/commendations to png-mng-implement at lists.sf.net Send comments/corrections/commendations to png-mng-implement at lists.sf.net
(subscription required; visit (subscription required; visit

1
png.c
View File

@ -477,6 +477,7 @@ png_free_data(png_const_structrp png_ptr, png_inforp info_ptr, png_uint_32 mask,
png_free(png_ptr, info_ptr->text); png_free(png_ptr, info_ptr->text);
info_ptr->text = NULL; info_ptr->text = NULL;
info_ptr->num_text = 0; info_ptr->num_text = 0;
info_ptr->max_text = 0;
} }
} }
#endif #endif