mewin/libpng
1
0
Fork 0
mirror of https://git.code.sf.net/p/libpng/code.git synced 2025-07-10 18:04:09 +02:00
Code Issues Projects Releases Wiki Activity

[libpng15] Fixed a potential null pointer dereference in png_set_text_2()

Browse Source 
(bug report and patch by Patrick Keshishian)
This commit is contained in:
Glenn Randers-Pehrson 2016-12-29 07:48:30 -06:00
parent aba2535d0f
commit ca76407b75
3 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ANNOUNCE
View File

@ -49,6 +49,8 @@ Changes since the last public release (1.5.27):
Since signed overflow is undefined in C90 the code has been modified to Since signed overflow is undefined in C90 the code has been modified to
correctly calculate a signed result. This requires changing the 'hi' correctly calculate a signed result. This requires changing the 'hi'
result parameter to a signed value. result parameter to a signed value.
Fixed a potential null pointer dereference in png_set_text_2() (bug report
and patch by Patrick Keshishian)
Send comments/corrections/commendations to png-mng-implement at lists.sf.net Send comments/corrections/commendations to png-mng-implement at lists.sf.net
(subscription required; visit (subscription required; visit

2
CHANGES
View File

@ -4528,6 +4528,8 @@ version 1.5.28rc01 [December 27, 2016]
ensure that it is correct. ensure that it is correct.
version 1.5.28 [December 29, 2016] version 1.5.28 [December 29, 2016]
Fixed a potential null pointer dereference in png_set_text_2() (bug report
and patch by Patrick Keshishian).
Send comments/corrections/commendations to png-mng-implement at lists.sf.net Send comments/corrections/commendations to png-mng-implement at lists.sf.net
(subscription required; visit (subscription required; visit

1
png.c
View File

@ -369,6 +369,7 @@ png_free_data(png_structp png_ptr, png_infop info_ptr, png_uint_32 mask,
png_free(png_ptr, info_ptr->text); png_free(png_ptr, info_ptr->text);
info_ptr->text = NULL; info_ptr->text = NULL;
info_ptr->num_text = 0; info_ptr->num_text = 0;
info_ptr->max_text = 0;
} }
} }
#endif #endif