Glenn Randers-Pehrson
0b21dc3efe
[libpng15] Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).
2017-03-01 15:46:04 -06:00
Glenn Randers-Pehrson
d0023a7391
[libpng15] Suppress clang warnings about implicit sign changes in png.c
2017-03-01 15:37:30 -06:00
Glenn Randers-Pehrson
11fc1f0f26
[libpng15] Clean up license info, mention CVE-2016-10087 in CHANGES
2016-12-30 13:58:49 -06:00
Glenn Randers-Pehrson
dbf3e10487
[libpng15] Bump version to 1.5.29beta01
2016-12-30 08:41:07 -06:00
Glenn Randers-Pehrson
237b11b573
[libpng15] Imported from libpng-1.5.28.tar
2016-12-29 07:49:17 -06:00
Glenn Randers-Pehrson
ca76407b75
[libpng15] Fixed a potential null pointer dereference in png_set_text_2()
...
(bug report and patch by Patrick Keshishian)
2016-12-29 07:48:30 -06:00
Glenn Randers-Pehrson
aba2535d0f
[libpng15] Bump version to 1.5.28
2016-12-29 07:45:56 -06:00
Glenn Randers-Pehrson
8cae396a20
[libpng15] Imported from libpng-1.5.28rc01.tar
2016-12-27 08:24:09 -06:00
Glenn Randers-Pehrson
daa97ebf42
[libpng15] Update CHANGES and ANNOUNCE
2016-12-26 19:28:24 -06:00
Glenn Randers-Pehrson
80d36775d4
Merge branch 'libpng15' of git://github.com/jbowler/libpng into libpng15
2016-12-26 19:27:37 -06:00
Glenn Randers-Pehrson
742c66f37c
[libpng15] none
2016-12-26 18:44:25 -06:00
John Bowler
95e0094f85
Eliminate signed overlow in png_64bit_product
...
The previous version produced a signed overflow as a result of both the
& 0xffff on the most significant bits of a negative argument; this
converted (-1) into 65535 which resulted in a subsequent overflow.
Since signed overflow is undefined in C90 the code has been modified to
correctly calculate a signed result. This requires changing the 'hi'
result parametr to a signed value.
This has been code reviewed solely by the author. A further code review
is highly desireable. Nevertheless the code compiles without warnings
from clang and without the prior detection of an overflow. Since it no
longer truncates any of the intermediate values this should be enough to
ensure that it is correct.
Signed-off-by: John Bowler <jbowler@acm.org>
2016-12-26 16:29:16 -08:00
John Bowler
09dcb906a7
Remove unsigned overflow
...
The previous code always results in an unsigned arithmetic overflow,
this is well defined but produces errors from clang with the option to
detect unsigned overflow. As the expression only gets evaluated once
per row in this version of libpng it is easier just to rewrite it.
Signed-off-by: John Bowler <jbowler@acm.org>
2016-12-26 16:27:33 -08:00
John Bowler
8d4110bd61
Remove 'defined' within macro
...
This removes the use of a macro containing the pre-processor 'defined'
operator. It is unclear whether this is valid; a macro which
"generates" 'defined' is not permitted, but the use of the work
"generates" within the C90 standard seems to imply more than simple
substitution of an expression itself containing a well-formed defined
operation.
Signed-off-by: John Bowler <jbowler@acm.org>
2016-12-26 16:24:40 -08:00
Glenn Randers-Pehrson
6b7c27341e
[libpng15] Merge with libpng16/pngminus
2016-10-30 09:20:04 -05:00
Glenn Randers-Pehrson
5a945f3393
[libpng15] Merge with libpng16/pngtest.c, pngvalid.c, gregbook, pngminim
2016-10-30 08:39:00 -05:00
Glenn Randers-Pehrson
b555c55c6d
[libpng15] Minor editing of INSTALL, (whitespace, added copyright line)
2016-08-18 12:49:16 -05:00
Glenn Randers-Pehrson
6d610b9c4d
[libpng15] Suppress warning about unused png_digit[] array in pngerror.c.
2016-08-07 18:50:58 -05:00
Glenn Randers-Pehrson
0188ecfb8f
[libpng15] Merge contrib/pngminim/*/makefile with those from libpng-1.6.24
2016-08-02 10:20:52 -05:00
Glenn Randers-Pehrson
5c026a3d59
[libpng15] Minor edit of INSTALL
2016-07-04 20:37:59 -05:00
Glenn Randers-Pehrson
7ea459bd4e
[libpng15] Added "Common linking failures" section to INSTALL.
2016-07-02 12:34:38 -05:00
Glenn Randers-Pehrson
a82098a22b
[libpng15] Sync contrib/libtests/pngvalid.c with libpng16
2016-06-25 15:00:36 -05:00
Glenn Randers-Pehrson
6ddc038db9
[libpng15] Fixed undefined behavior in png_push_save_buffer(). Do not call
...
memcpy() with a null source, even if count is zero (Leon Scroggins III).
2016-06-03 21:26:43 -05:00
Glenn Randers-Pehrson
c1ac308d12
[libpng15] Merge contrib/libtests/pngvalid.c with libpng16
2016-05-31 10:05:56 -05:00
Glenn Randers-Pehrson
94727db1ea
[libpng15] Bump version to 1.5.28beta01
2016-05-29 15:59:43 -05:00
John Bowler
6a1a8df343
Backported pngvalid changes from libpng 1.6
...
Signed-off-by: John Bowler <jbowler@acm.org>
2016-05-29 12:44:22 -07:00
Glenn Randers-Pehrson
6fb875a54e
[libpng15] Imported from libpng-1.5.27.tar
2016-05-26 07:24:57 -05:00
Glenn Randers-Pehrson
9c7338aa16
[libpng15] Imported from libpng-1.5.27rc01.tar
2016-05-14 09:42:35 -05:00
Glenn Randers-Pehrson
c5da514b08
[libpng15] Bump version to 1.5.27beta03
2016-05-11 06:42:58 -05:00
Glenn Randers-Pehrson
b78e99b1c9
[libpng15] Imported from libpng-1.5.27beta02.tar
2016-05-11 06:36:14 -05:00
Glenn Randers-Pehrson
14beb679d4
[libpng15] Merge png.h with libpng16/png.h
2016-05-11 06:34:59 -05:00
Glenn Randers-Pehrson
d92b1c6305
[libpng15] Bump version to 1.5.27beta02
2016-03-09 12:04:24 -06:00
Glenn Randers-Pehrson
870fcc9b64
[libpng15] Imported from libpng-1.5.27beta01.tar
2016-03-09 12:04:14 -06:00
Glenn Randers-Pehrson
09779deaa9
[libpng15] Added a common-law trademark notice and export control information
...
to the LICENSE file, png.h, and the man page.
Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
(Robert C. Seacord).
2016-02-14 13:10:43 -06:00
Glenn Randers-Pehrson
55aea59737
[libpng15] Make pnglibconf.h a public header in CmakeLists.txt
2016-02-09 08:44:30 -06:00
Roger Leigh
1f2fe83987
[libpng15] Updated CMakeLists.txt, added supporting scripts/gen*.cmake.in
...
and test.cmake.in (Roger Leigh).
2016-02-08 18:43:58 -06:00
John Bowler
1cef0c0eae
pngvalid: backport autoconf exit(77) fix
...
Signed-off-by: John Bowler <jbowler@acm.org>
2016-01-28 16:49:48 -08:00
Glenn Randers-Pehrson
73adedf0e4
[libpng15] Revised workaround for Coverity issue in pngvalid.c
2016-01-23 10:06:58 -06:00
Glenn Randers-Pehrson
7190c4f5af
[libpng15] Worked around a false-positive Coverity issue in pngvalid.c.
2016-01-13 09:55:15 -06:00
Glenn Randers-Pehrson
d189b54e30
[libpng15] Happy 2016! Updated copyright year.
2016-01-02 14:09:11 -06:00
Glenn Randers-Pehrson
c583ec1579
[libpng15] In projects/vstudio, combined readme.txt and WARNING into README.txt
2015-12-29 08:43:51 -06:00
Glenn Randers-Pehrson
89a025317c
[libpng15] Update CHANGES and ANNOUNCE with recent pngvalid.c update
2015-12-17 20:22:16 -06:00
Glenn Randers-Pehrson
7c32176ba0
Merge branch 'libpng15' of git://github.com/jbowler/libpng-1 into libpng15
2015-12-17 20:19:23 -06:00
Glenn Randers-Pehrson
684c68d6fb
[libpng15] Bump version to 1.5.27beta01
2015-12-17 20:09:18 -06:00
John Bowler
829cba63d3
Fix undefined behavior in pngvalid.c
...
Undefined because (png_byte) << shift is undefined if it changes the signed bit
(because png_byte is promoted to int). The libpng exported functions
png_get_uint_32 and png_get_uint_16 handle this.
Bug reported by David Drysdale as a result of reports from UBSAN in clang 3.8.
This changes pngvalid to use BE random numbers; this used to produce errors but
these should not be fixed as a result of the previous changes.
Signed-off-by: John Bowler <jbowler@acm.org>
2015-12-17 12:57:49 -08:00
John Bowler
b409572cec
Merge branch 'libpng15' of ../../libpng into libpng15
2015-12-17 09:40:11 -08:00
Glenn Randers-Pehrson
94322f3f8f
[libpng15] Imported from libpng-1.5.26.tar
2015-12-17 08:11:20 -06:00
John Bowler
aff684567e
pngvalid from libpng 1.7 with fixes
...
Signed-off-by: John Bowler <jbowler@acm.org>
2015-12-15 08:28:02 -08:00
Glenn Randers-Pehrson
8f1c1a6d8c
[libpng15] Imported from libpng-1.5.26rc01.tar
2015-12-13 21:44:19 -06:00
Glenn Randers-Pehrson
fd3cd9fad2
[libpng15] Update some last-changed dates
2015-12-13 18:36:30 -06:00
