mewin/libpng
1
0
Fork 0
mirror of https://git.code.sf.net/p/libpng/code.git synced 2025-07-10 18:04:09 +02:00
Code Issues Projects Releases Wiki Activity

[libpng17] Do not read invalid sBIT chunks. Previously libpng only checked sBIT

Browse Source 
values on write, so a malicious PNG writer could therefore cause
the read code to return an invalid sBIT chunk, which might lead to
application errors or crashes.  Such chunks are now skipped (with
chunk_benign_error).
This commit is contained in:
John Bowler
2014-02-05 12:15:42 -06:00
committed by Glenn Randers-Pehrson
parent dc63b03da1
commit d29413a2a9
3 changed files with 26 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
ANNOUNCE
View File

@@ -515,6 +515,11 @@ Version 1.7.0beta31 [February 5, 2014]
outside the range that should be produced by the shift. Reversing the
order on read makes the two transforms work together correctly and mirrors
the order used on write.
Do not read invalid sBIT chunks. Previously libpng only checked sBIT
values on write, so a malicious PNG writer could therefore cause
the read code to return an invalid sBIT chunk, which might lead to
application errors or crashes. Such chunks are now skipped (with
chunk_benign_error).
Send comments/corrections/commendations to png-mng-implement at lists.sf.net
(subscription required; visit