mewin/libpng
1
0
Fork 0
mirror of https://git.code.sf.net/p/libpng/code.git synced 2025-07-10 18:04:09 +02:00
Code Issues Projects Releases Wiki Activity

[libpng17] Fixed length written to uncompressed iTXt chunks (Samuli Suominen).

Browse Source
This commit is contained in:
Glenn Randers-Pehrson
2013-04-13 16:23:48 -05:00
parent 23674b75be
commit 55e93d7090
3 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
ANNOUNCE
View File

@@ -247,6 +247,7 @@ Version 1.7.0beta07 [April 13, 2013]
transform_info is called.
Corrected a misplaced closing bracket in contrib/libtests/pngvalid.c
(Flavio Medeiros).
Corrected length written to uncompressed iTXt chunks (Samuli Suominen).
Send comments/corrections/commendations to png-mng-implement at lists.sf.net
(subscription required; visit

1
CHANGES
View File

@@ -4534,6 +4534,7 @@ Version 1.7.0beta07 [April 13, 2013]
transform_info is called.
Corrected a misplaced closing bracket in contrib/libtests/pngvalid.c
(Flavio Medeiros).
Corrected length written to uncompressed iTXt chunks (Samuli Suominen).
Send comments/corrections/commendations to png-mng-implement at lists.sf.net
(subscription required; visit

4
pngwutil.c
View File

@@ -1742,16 +1742,16 @@ png_write_iTXt(png_structrp png_ptr, int compression, png_const_charp key,
{
if (png_text_compress(png_ptr, png_iTXt, &comp, prefix_len) != Z_OK)
png_error(png_ptr, png_ptr->zstream.msg);
png_write_chunk_header(png_ptr, png_iTXt, comp.output_len + prefix_len);
}
else
{
if (comp.input_len > PNG_UINT_31_MAX-prefix_len)
png_error(png_ptr, "iTXt: uncompressed text too long");
png_write_chunk_header(png_ptr, png_iTXt, strlen(text) + prefix_len);
}
png_write_chunk_header(png_ptr, png_iTXt, comp.output_len + prefix_len);
png_write_chunk_data(png_ptr, new_key, key_len);
png_write_chunk_data(png_ptr, (png_const_bytep)lang, lang_len);