[libpng16] Guard against Uninitialized Memory Read in png_check_icc_table(),

detected by the oss-fuzz project.
This commit is contained in:
Glenn Randers-Pehrson
2017-09-12 08:22:09 -05:00
parent 0f2adc19eb
commit 61d29bfc80
3 changed files with 12 additions and 5 deletions

View File

@@ -1,4 +1,4 @@
Libpng 1.6.33beta03 - September 8, 2017
Libpng 1.6.33beta03 - September 12, 2017
This is not intended to be a public release. It will be replaced
within a few weeks by a public version or by another test version.
@@ -39,12 +39,14 @@ Version 1.6.33beta02 [September 3, 2017]
changed date of contrib/oss-fuzz files.
Enabled ARM support in CMakeLists.txt (Bernd Kuhls).
Version 1.6.33beta03 [September 8, 2017]
Version 1.6.33beta03 [September 12, 2017]
Fixed incorrect typecast of some arguments to png_malloc() and
png_calloc() that were png_uint_32 instead of png_alloc_size_t
(Bug report by "irwir" in Github libpng issue #175).
Use pnglibconf.h.prebuilt when building for ANDROID with cmake (Github
issue 162, by rcdailey).
Guard against Uninitialized Memory Read in png_check_icc_table(), detected
by the oss-fuzz project.
Send comments/corrections/commendations to png-mng-implement at lists.sf.net
(subscription required; visit