[libpng12] Issue a png_error() instead of a png_warning() when width is

potentially too large for the architecture, in case the calling
application has overridden the default 1,000,000-column limit
(fixes CVE-2014-9495 and CVE-2015-0973).
This commit is contained in:
Glenn Randers-Pehrson
2015-01-31 13:08:48 -06:00
parent f34e3f4667
commit a4d40f32dd
3 changed files with 11 additions and 0 deletions

View File

@@ -44,6 +44,10 @@ Other information:
Changes since the last public release (1.2.52):
version 1.2.53beta01 [RDATE%]
Issue a png_error() instead of a png_warning() when width is
potentially too large for the architecture, in case the calling
application has overridden the default 1,000,000-column limit
(fixes CVE-2014-9495 and CVE-2015-0973).
Send comments/corrections/commendations to png-mng-implement at lists.sf.net
(subscription required; visit