1955 Commits

Author SHA1 Message Date
Glenn Randers-Pehrson
5944b94730 [libpng15] Imported from libpng-1.5.30.tar v1.5.30 2017-09-28 15:55:32 -05:00
Glenn Randers-Pehrson
77cc76ed61 [libpng15] Imported from libpng-1.5.30rc01.tar v1.5.30rc01 2017-09-20 18:15:55 -05:00
Glenn Randers-Pehrson
22d6a699f2 [libpng15] Bump version to 1.5.30beta03 2017-09-14 12:55:43 -05:00
Glenn Randers-Pehrson
ff9a7751d6 [libpng15] Imported from libpng-1.5.30beta02.tar v1.5.30beta02 2017-09-14 12:55:26 -05:00
Glenn Randers-Pehrson
1a21497f6a [libpng15] Fixed incorrect typecast of some arguments to png_malloc() and
png_calloc() that were png_uint_32 instead of png_alloc_size_t
(Bug report by "irwir" in Github libpng issue #175).
2017-09-03 15:54:07 -05:00
Glenn Randers-Pehrson
0d9bc0782e [libpng15] Bump version to 1.5.30beta02 2017-09-03 15:53:22 -05:00
Glenn Randers-Pehrson
9a414e2c8f [libpng15] Revise pngrutil.c with a more generous size limit for IDAT chunks. 2017-09-03 09:06:48 -05:00
Glenn Randers-Pehrson
99a7952dab [libpng15] Fix "last changed" date in pngtrans.c 2017-08-29 12:40:43 -05:00
Glenn Randers-Pehrson
5b5e68dee4 [libpng15] Imported from libpng-1.5.30beta01.tar v1.5.30beta01 2017-08-28 18:33:58 -05:00
Glenn Randers-Pehrson
f9b874e27e [libpng15] Bump version to 1.5.30beta01 2017-08-28 12:14:19 -05:00
Glenn Randers-Pehrson
e7c0ec1e92 [libpng15] Imported from libpng-1.5.29.tar v1.5.29 2017-08-24 16:38:35 -05:00
Glenn Randers-Pehrson
fe3a4493e5 [libpng15] Imported from libpng-1.5.29rc01.tar v1.5.29rc01 2017-08-18 20:00:30 -05:00
Glenn Randers-Pehrson
a862fd04b9 [libpng15] Imported from libpng-1.5.29beta02.tar v1.5.29beta02 2017-08-07 09:43:44 -05:00
Glenn Randers-Pehrson
752c6c0042 [libpng15] Moved chunk-name and chunk-length checks into PNG_EXTERN private
png_check_chunk_name() and png_check_chunk_length() functions
  (Suggested by Max Stepin).
Merged pngtest.c with libpng-1.6.32.
2017-08-06 19:14:18 -05:00
Glenn Randers-Pehrson
dc2b679f13 [libpng15] Update documentation of user limits 2017-05-22 10:21:11 -05:00
Glenn Randers-Pehrson
11ece2b403 [libpng15] Change http: urls to https: in libpng.3 2017-04-03 17:02:15 -05:00
Glenn Randers-Pehrson
22a018e49d [libpng15] Bump version to 1.5.29beta02 2017-04-01 11:19:30 -05:00
Glenn Randers-Pehrson
934593011b [libpng15] Imported from libpng-1.5.29beta01.tar v1.5.29beta01 2017-04-01 11:19:17 -05:00
Glenn Randers-Pehrson
ece1601032 [libpng15] Silence clang -Wcomma warnings (Viktor SzaKats). 2017-03-30 13:39:23 -05:00
Glenn Randers-Pehrson
3e878e3f8d [libpng15] Added missing "$(CPPFLAGS)" to the compile line for c.pic.o in
makefile.linux and makefile.solaris-x86 (Cosmin).
2017-03-21 20:00:33 -05:00
Glenn Randers-Pehrson
0b21dc3efe [libpng15] Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer). 2017-03-01 15:46:04 -06:00
Glenn Randers-Pehrson
d0023a7391 [libpng15] Suppress clang warnings about implicit sign changes in png.c 2017-03-01 15:37:30 -06:00
Glenn Randers-Pehrson
11fc1f0f26 [libpng15] Clean up license info, mention CVE-2016-10087 in CHANGES 2016-12-30 13:58:49 -06:00
Glenn Randers-Pehrson
dbf3e10487 [libpng15] Bump version to 1.5.29beta01 2016-12-30 08:41:07 -06:00
Glenn Randers-Pehrson
237b11b573 [libpng15] Imported from libpng-1.5.28.tar v1.5.28 2016-12-29 07:49:17 -06:00
Glenn Randers-Pehrson
ca76407b75 [libpng15] Fixed a potential null pointer dereference in png_set_text_2()
(bug report and patch by Patrick Keshishian)
2016-12-29 07:48:30 -06:00
Glenn Randers-Pehrson
aba2535d0f [libpng15] Bump version to 1.5.28 2016-12-29 07:45:56 -06:00
Glenn Randers-Pehrson
8cae396a20 [libpng15] Imported from libpng-1.5.28rc01.tar v1.5.28rc01 2016-12-27 08:24:09 -06:00
Glenn Randers-Pehrson
daa97ebf42 [libpng15] Update CHANGES and ANNOUNCE 2016-12-26 19:28:24 -06:00
Glenn Randers-Pehrson
80d36775d4 Merge branch 'libpng15' of git://github.com/jbowler/libpng into libpng15 2016-12-26 19:27:37 -06:00
Glenn Randers-Pehrson
742c66f37c [libpng15] none 2016-12-26 18:44:25 -06:00
John Bowler
95e0094f85 Eliminate signed overlow in png_64bit_product
The previous version produced a signed overflow as a result of both the
& 0xffff on the most significant bits of a negative argument; this
converted (-1) into 65535 which resulted in a subsequent overflow.
Since signed overflow is undefined in C90 the code has been modified to
correctly calculate a signed result.  This requires changing the 'hi'
result parametr to a signed value.

This has been code reviewed solely by the author.  A further code review
is highly desireable.  Nevertheless the code compiles without warnings
from clang and without the prior detection of an overflow.  Since it no
longer truncates any of the intermediate values this should be enough to
ensure that it is correct.

Signed-off-by: John Bowler <jbowler@acm.org>
2016-12-26 16:29:16 -08:00
John Bowler
09dcb906a7 Remove unsigned overflow
The previous code always results in an unsigned arithmetic overflow,
this is well defined but produces errors from clang with the option to
detect unsigned overflow.  As the expression only gets evaluated once
per row in this version of libpng it is easier just to rewrite it.

Signed-off-by: John Bowler <jbowler@acm.org>
2016-12-26 16:27:33 -08:00
John Bowler
8d4110bd61 Remove 'defined' within macro
This removes the use of a macro containing the pre-processor 'defined'
operator.  It is unclear whether this is valid; a macro which
"generates" 'defined' is not permitted, but the use of the work
"generates" within the C90 standard seems to imply more than simple
substitution of an expression itself containing a well-formed defined
operation.

Signed-off-by: John Bowler <jbowler@acm.org>
2016-12-26 16:24:40 -08:00
Glenn Randers-Pehrson
6b7c27341e [libpng15] Merge with libpng16/pngminus 2016-10-30 09:20:04 -05:00
Glenn Randers-Pehrson
5a945f3393 [libpng15] Merge with libpng16/pngtest.c, pngvalid.c, gregbook, pngminim 2016-10-30 08:39:00 -05:00
Glenn Randers-Pehrson
b555c55c6d [libpng15] Minor editing of INSTALL, (whitespace, added copyright line) 2016-08-18 12:49:16 -05:00
Glenn Randers-Pehrson
6d610b9c4d [libpng15] Suppress warning about unused png_digit[] array in pngerror.c. 2016-08-07 18:50:58 -05:00
Glenn Randers-Pehrson
0188ecfb8f [libpng15] Merge contrib/pngminim/*/makefile with those from libpng-1.6.24 2016-08-02 10:20:52 -05:00
Glenn Randers-Pehrson
5c026a3d59 [libpng15] Minor edit of INSTALL 2016-07-04 20:37:59 -05:00
Glenn Randers-Pehrson
7ea459bd4e [libpng15] Added "Common linking failures" section to INSTALL. 2016-07-02 12:34:38 -05:00
Glenn Randers-Pehrson
a82098a22b [libpng15] Sync contrib/libtests/pngvalid.c with libpng16 2016-06-25 15:00:36 -05:00
Glenn Randers-Pehrson
6ddc038db9 [libpng15] Fixed undefined behavior in png_push_save_buffer(). Do not call
memcpy() with a null source, even if count is zero (Leon Scroggins III).
2016-06-03 21:26:43 -05:00
Glenn Randers-Pehrson
c1ac308d12 [libpng15] Merge contrib/libtests/pngvalid.c with libpng16 2016-05-31 10:05:56 -05:00
Glenn Randers-Pehrson
94727db1ea [libpng15] Bump version to 1.5.28beta01 2016-05-29 15:59:43 -05:00
John Bowler
6a1a8df343 Backported pngvalid changes from libpng 1.6
Signed-off-by: John Bowler <jbowler@acm.org>
2016-05-29 12:44:22 -07:00
Glenn Randers-Pehrson
6fb875a54e [libpng15] Imported from libpng-1.5.27.tar v1.5.27 2016-05-26 07:24:57 -05:00
Glenn Randers-Pehrson
9c7338aa16 [libpng15] Imported from libpng-1.5.27rc01.tar v1.5.27rc01 2016-05-14 09:42:35 -05:00
Glenn Randers-Pehrson
c5da514b08 [libpng15] Bump version to 1.5.27beta03 2016-05-11 06:42:58 -05:00
Glenn Randers-Pehrson
b78e99b1c9 [libpng15] Imported from libpng-1.5.27beta02.tar v1.5.27beta02 2016-05-11 06:36:14 -05:00