Glenn Randers-Pehrson
aea0ec4346
[libpng16] Initialize tRNS read buffers in pngrutil.c
2017-10-20 19:38:03 -05:00
Glenn Randers-Pehrson
9bddba26de
[libpng16] Initialize entire palette array to zero in png_handle_PLTE().
2017-10-17 16:22:22 -05:00
Glenn Randers-Pehrson
2ee8cb0559
[libpng16] Imported from libpng-1.6.33.tar
2017-09-28 13:58:30 -05:00
Glenn Randers-Pehrson
3d2d0b52a3
[libpng16] Fix Coverity defect regarding errmsg in pngrutil.c
2017-09-23 21:22:18 -05:00
Glenn Randers-Pehrson
90dd185aed
[libpng16] Removed more redundant tests (suggested by "irwir" in Github issue #180 ).
2017-09-22 17:29:59 -05:00
Glenn Randers-Pehrson
0165badb9d
[libpng16] Relocate new memset() call in pngrutil.c (irwir).
2017-09-22 15:21:36 -05:00
Glenn Randers-Pehrson
5efa483265
[libpng16] Removed a redundant test (suggested by "irwir" in Github issue #180 ).
2017-09-20 15:53:38 -05:00
Glenn Randers-Pehrson
5f0c9fabbc
[libpng16] Bump version to 1.6.33rc01
2017-09-20 15:50:17 -05:00
Glenn Randers-Pehrson
397c7eea38
[libpng16] Add a memset() in png_read_buffer()
2017-09-19 18:52:21 -05:00
Glenn Randers-Pehrson
066cb34268
[libpng16] Fix some comments
2017-09-19 15:52:36 -05:00
Glenn Randers-Pehrson
721b96ef90
[libpng16] zero out memory allocated by png_inflate
2017-09-18 14:23:41 -05:00
Glenn Randers-Pehrson
c2c8b398a9
[libpng16] Imported from libpng-1.6.33beta02.tar
2017-09-02 19:48:19 -05:00
Glenn Randers-Pehrson
eb2f42aa97
[libpng16] Compute a larger limit on IDAT because some applications write a
...
deflate buffer for each row (Bug report by Andrew Church).
2017-08-31 11:14:23 -05:00
Glenn Randers-Pehrson
58720d3c06
[libpng16] Fix "last changed" dates
2017-08-29 12:29:03 -05:00
Glenn Randers-Pehrson
f6ca33d42c
[libpng16] Bump version to 1.6.33beta01
2017-08-25 18:54:30 -05:00
Glenn Randers-Pehrson
df7e9dae0c
[libpng16] Imported from libpng-1.6.32.tar
2017-08-24 16:39:02 -05:00
Glenn Randers-Pehrson
c362a8c80e
[libpng16] Free eXIf_buf when detecting bad byte-order specifier.
2017-08-07 06:31:58 -05:00
Glenn Randers-Pehrson
33787340a4
Fix typo (1 should be 2) in png_handle_eXIf
2017-08-06 10:35:23 -05:00
Glenn Randers-Pehrson
cf713fb0ab
[libpng16] Check that the eXIf chunk has at least 2 bytes and begins
...
with "II" or "MM".
2017-08-06 10:24:04 -05:00
Glenn Randers-Pehrson
c82ae40e9f
[libpng16] Test or 11 bytes instead of 14 after the iCCP keyword has been read.
2017-08-06 08:37:48 -05:00
Glenn Randers-Pehrson
099558d100
[libpng16] Relocate the iCCP length test to a point after reading the keyword
2017-08-06 08:25:56 -05:00
Glenn Randers-Pehrson
8ed418b042
[libpng16] Increase minimum zlib stream from 9 to 14 in png_handle_iCCP(),
...
to account for the minimum 'deflate' stream.
2017-08-06 07:59:02 -05:00
Glenn Randers-Pehrson
39d84f4f6a
[lbpng16] Attempt to fix a UMR in png_set_text_2() to fix OSS-fuzz issue.
2017-08-05 20:51:23 -05:00
Glenn Randers-Pehrson
c5c778bcfc
[libpng16] Initialize profile_header[] in png_handle_iCCP() to fix OSS-fuzz issue.
2017-08-05 20:15:52 -05:00
Glenn Randers-Pehrson
1ebe4f75cc
[Libpng16] Relocated setting free_me for eXIf data, to stop an OSS-fuzz leak.
2017-08-05 19:58:41 -05:00
Glenn Randers-Pehrson
13bc0b6b1f
[libpng16] Make png_check_chunk_length|name() parameters const
2017-08-05 15:35:45 -05:00
Glenn Randers-Pehrson
fcd1bb9312
[libpng16] Removed unused chunk_name parameter from png_check_chunk_length().
2017-08-05 15:08:40 -05:00
Glenn Randers-Pehrson
2dca15686f
[libpng16] Moved chunk-length check into a png_check_chunk_length() private
...
function (Suggested by Max Stepin).
2017-08-04 14:09:27 -05:00
Glenn Randers-Pehrson
469317d9bd
[libpng16] Removed a left-over debugging "printf" statement from pngrutil.c
2017-08-04 12:14:39 -05:00
Glenn Randers-Pehrson
2dbef2f2a9
[libpng16] Restored IDAT length check. Previously the calculated limit was five
...
bytes too small (neglected to account for a partial DEFLATE buffer)
2017-08-03 18:03:12 -05:00
Glenn Randers-Pehrson
4ac8b5e0d6
[libpng16] Use png_debug2() instead of printf() for bug reporting.
2017-08-03 16:29:58 -05:00
Glenn Randers-Pehrson
095b4ce16b
[libpng16] Disabled new limit test on IDAT chunks. It was producing too small
...
a limit for some files.
2017-08-03 12:43:56 -05:00
Glenn Randers-Pehrson
d930d36155
[libpng16] Restored png_get_eXIf_1() and png_set_eXIf_1() because strlen(eXIf_buf)
...
does not work (the eXIf chunk data can contain zeroes).
2017-08-03 10:29:10 -05:00
Glenn Randers-Pehrson
a1fe2c9848
[libpng16] Check length of IDAT against maximum possible IDAT size, accounting
...
for height, rowbytes, interlacing and zlib/deflate overhead.
2017-08-03 10:01:35 -05:00
Glenn Randers-Pehrson
347538efbd
[libng16] Check length of all chunks except IDAT against user limit.
2017-08-02 19:21:19 -05:00
Glenn Randers-Pehrson
3fa1df48a1
[libpng16] Removed png_get_eXIf_1() and png_set_eXIf_1().
2017-08-02 17:27:41 -05:00
Glenn Randers-Pehrson
fd6b87253c
[libpng16] Eliminate local eXIf_buf from png_handle_eXIf()
2017-08-02 06:35:15 -05:00
Glenn Randers-Pehrson
71a56180e5
[libpng16] Stop memory leak when returning from png_handle_eXIf() with an error
...
(Bug report from the OSS-fuzz project).
2017-08-01 21:42:16 -05:00
Glenn Randers-Pehrson
bc68c41d5f
[libpng16] Initialized btoa[] in pngstest.c; stop memory leak in png_handle_eXIf()
...
when returning with an error.
2017-08-01 15:24:21 -05:00
Glenn Randers-Pehrson
3524b0d201
[libpng16] Update "Last changed" dates and some copyright years
2017-07-31 17:03:17 -05:00
Glenn Randers-Pehrson
3e753f5cbe
[libpng16] Changed name of png_get_eXIF and png_set_eXIf() to png_get_eXIf_1()
...
and png_set_eXIf_1(), respectively, to avoid breaking API compatibility
with libpng-1.6.31.
2017-07-31 16:56:30 -05:00
Glenn Randers-Pehrson
40afb68570
[libpng16] Added calls to png_handle_eXIf(() in pngread.c and png_write_eXIf()
...
in pngwrite.c, and made various other fixes to png_write_eXIf().
Eliminated png_ptr->num_exif member from pngstruct.h and added num_exif
to arguments for png_get_eXIf() and png_set_eXIf().
2017-07-31 14:21:46 -05:00
Glenn Randers-Pehrson
4ab78af90a
[libpng16] Avoid possible NULL dereference in png_handle_eXIf when benign_errors
...
are allowed. Avoid leaking the input buffer "eXIf_buf".
2017-07-30 19:36:25 -05:00
Glenn Randers-Pehrson
9fcb846402
[libpng16] Imported from libpng-1.6.31.tar
2017-07-27 05:27:17 -05:00
Glenn Randers-Pehrson
68cb0aaee3
[libpng16] Implement eXIf chunk support
2017-07-13 11:22:48 -05:00
John Bowler
72d07d3202
[libpng16] Removed one of the GCC-7.1.0 'strict-overflow' warnings that
...
result when integers appear on both sides of a compare. Worked around the
others by forcing the strict-overflow setting in the relevant functions to
a level where they are not reported.
Changed "FALL THROUGH" comments to "FALLTHROUGH" because GCC doesn't like
the space.
Worked around some C-style casts from (void*) because g++ 5.4.0 objects
to them.
Increased the buffer size for 'sprint' to pass the gcc 7.1.0 'sprint
overflow' check that is on by default with -Wall -Wextra.
2017-07-11 08:47:05 -05:00
Glenn Randers-Pehrson
9f7134c3fc
[libpng16] Update some "last changed" dates
2017-06-29 17:52:18 -05:00
Glenn Randers-Pehrson
2eff8ef504
[libpng16] Imported from libpng-1.6.30beta02.tar
2017-04-22 15:46:59 -05:00
Glenn Randers-Pehrson
e744ee1338
[libpng16] Update CHANGES, ANNOUNCE, and "last changed" dates.
2017-03-30 12:24:55 -05:00
Viktor Szakats
8c50acb9d2
silence clang -Wcomma warnings
2017-03-29 23:54:40 +00:00