Glenn Randers-Pehrson
d0afab5ce3
[libpng14] Fixed a potential null pointer dereference in png_set_text_2()
...
(bug report and patch by Patrick Keshishian)
2016-12-29 07:43:43 -06:00
Glenn Randers-Pehrson
ff37256e4d
[libpng14] Bump version to 1.4.20
2016-12-29 07:42:27 -06:00
Glenn Randers-Pehrson
007ee4eee9
[libpng14] Imported from libpng-1.4.20rc01.tar
2016-12-27 08:23:51 -06:00
Glenn Randers-Pehrson
55a3414ba2
[libpng14] No changes.
2016-12-26 18:46:36 -06:00
Glenn Randers-Pehrson
a207fcab31
[libpng14] Suppress warning about unused png_digit[] array in pngerror.c.
2016-08-07 18:52:48 -05:00
Glenn Randers-Pehrson
7d9017e7c0
[libpng14] Fixed undefined behavior in png_push_save_buffer(). Do not call
...
memcpy() with a null source, even if count is zero (Leon Scroggins III).
2016-06-03 21:50:06 -05:00
Glenn Randers-Pehrson
8a1b9409b6
[libpng14] Bump version to 1.4.20beta01
2016-02-29 18:43:24 -06:00
Glenn Randers-Pehrson
2bc6b71e16
[libpng14] Fix typos in libpng.3 synopses (Eric S. Raymond).
2016-02-29 18:31:41 -06:00
Glenn Randers-Pehrson
9eb7463c75
[libpng14] Bump version to 1.4.20beta01, update copyright year to 2016
2016-01-02 19:02:25 -06:00
Glenn Randers-Pehrson
a86bef279c
[libpng14] Imported from libpng-1.4.19.tar
2015-12-17 08:11:07 -06:00
Glenn Randers-Pehrson
a69e82ed16
[libpng14] Imported from libpng-1.4.19rc01.tar
2015-12-13 21:43:59 -06:00
Glenn Randers-Pehrson
e96c299bf4
[libpng14] Remove new redundant prototype for png_check_keyword() from pngpriv.h
2015-12-13 17:38:02 -06:00
Glenn Randers-Pehrson
6e7474c7eb
[libpng14] Bump version to 1.4.19beta02
2015-12-13 16:02:56 -06:00
Glenn Randers-Pehrson
4c13318d38
[libpng14] Moved png_check_keyword() from pngwutil.c to pngset.c
2015-12-13 16:00:58 -06:00
Glenn Randers-Pehrson
38a9ec94cb
[libpng14] Imported from libpng-1.4.19beta01.tar
2015-12-11 10:20:33 -06:00
Glenn Randers-Pehrson
83283ff752
[libpng14] Bump version to 1.4.19beta01
2015-12-09 09:43:42 -06:00
Glenn Randers-Pehrson
9d757479d1
[libpng14] Fixed an out-of-range read in png_check_keyword() (Bug report from
...
Qixue Xiao).
2015-12-09 09:37:20 -06:00
Glenn Randers-Pehrson
8c12b3c2cc
[libpng14] Imported from libpng-1.4.18.tar
2015-12-02 22:30:18 -06:00
Glenn Randers-Pehrson
7fe3416520
[libpng14] Imported from libpng-1.4.18rc01.tar
2015-11-26 07:04:07 -06:00
Glenn Randers-Pehrson
62b6843b46
[libpng14] Imported from libpng-1.4.18beta02.tar
2015-11-23 09:29:23 -06:00
Glenn Randers-Pehrson
3b711ccc4f
[libpng14] Revert 12 -> 12U change in pngrutil.c
2015-11-22 22:58:10 -06:00
Glenn Randers-Pehrson
dabe6c2a27
[libpng14] Fixed bug recently introduced in png_set_PLTE() that uses png_ptr
...
not info_ptr.
2015-11-22 20:46:37 -06:00
Glenn Randers-Pehrson
1a45414d86
[libpng14] Bump version to 1.4.18beta02
2015-11-22 14:11:08 -06:00
Glenn Randers-Pehrson
89cf81e3eb
[libpng14] Imported from libpng-1.4.18beta01.tar
2015-11-22 14:08:36 -06:00
Glenn Randers-Pehrson
b0c1d88cee
[libpng15] Use unsigned constants in buffer length comparisons
2015-11-21 14:34:26 -06:00
Glenn Randers-Pehrson
5b948c3e11
[lbpng14] Avoid potential pointer overflow in png_handle_iTXt(),
...
png_handle_zTXt(), png_handle_sPLT(), and png_handle_pCAL() (Bug report
by John Regehr).
2015-11-13 23:02:35 -06:00
Glenn Randers-Pehrson
e9fa8b4364
[libpng14] Bump version to 1.4.18beta01
2015-11-13 10:17:25 -06:00
Glenn Randers-Pehrson
877590539c
[libpng14] Imported from libpng-1.4.17.tar
2015-11-12 07:12:53 -06:00
Glenn Randers-Pehrson
de3ee49b87
[libpng14] Clean up coding style in png_handle_PLTE()
2015-11-05 11:17:01 -06:00
Glenn Randers-Pehrson
affbce36f9
[libpng14] Imported from libpng-1.4.17rc04.tar
2015-11-05 06:59:06 -06:00
Glenn Randers-Pehrson
56def65afe
[libpng14] Fixed new bug with CRC error after reading an over-length palette.
2015-11-04 23:44:13 -06:00
Glenn Randers-Pehrson
f1fb90f1aa
[libpng14] Imported from libpng-1.4.17rc03.tar
2015-11-03 10:02:14 -06:00
Glenn Randers-Pehrson
5d1f9565ed
[libpng14] Clarified COPYRIGHT information to state explicitly that versions
...
are derived from previous versions. Removed much of the long list of
previous versions from png.h and libpng.3.
2015-11-03 07:40:20 -06:00
Glenn Randers-Pehrson
e1b2bb2487
[libpng14] Bump version to 1.4.17rc03
2015-11-03 07:32:09 -06:00
Glenn Randers-Pehrson
8733da6340
[libpng14] Imported from libpng-1.4.17rc02.tar
2015-10-31 08:12:37 -05:00
Glenn Randers-Pehrson
ffbef435e2
[libpng14] Bump version to 1.4.17rc02
2015-10-31 07:58:53 -05:00
Glenn Randers-Pehrson
fd97f3e31e
[libpng14] Prevent writing over-length PLTE chunk (Cosmin Truta) and
...
silently truncate over-length PLTE chunk while reading.
2015-10-31 07:56:39 -05:00
Glenn Randers-Pehrson
82c5abc170
[libpng14] Imported from libpng-1.4.17rc01.tar
2015-10-28 10:17:26 -05:00
Glenn Randers-Pehrson
a248f1ba62
[libpng14] Add reference to CVE-2015-7981 in CHANGES and ANNOUNCE
2015-10-27 12:50:29 -05:00
Glenn Randers-Pehrson
ecf10cb8b7
[libpng14] Bump version to 1.4.17beta04
2015-10-23 09:06:15 -05:00
Glenn Randers-Pehrson
fa6b9cf320
[libpng14] Imported from libpng-1.4.17beta03.tar
2015-10-23 09:06:08 -05:00
Glenn Randers-Pehrson
b655705279
[libpng14] Removed obsolete "sunfix" patch files.
2015-10-23 09:02:11 -05:00
Glenn Randers-Pehrson
52c89ad053
[libpng14] Added a safety check in png_set_tIME() (Bug report from Qixue Xiao).
2015-10-23 09:01:31 -05:00
Glenn Randers-Pehrson
67c4bc9f5c
[libpng14] Bump version to 1.4.17beta03
2015-10-14 22:38:05 -05:00
Glenn Randers-Pehrson
923ee398ab
[libpng14] Imported from libpng-1.4.17beta02.tar
2015-10-14 22:37:58 -05:00
Glenn Randers-Pehrson
e20eca266e
[libpng14] Added sPLT support to pngtest.c
2015-10-14 22:34:54 -05:00
John Bowler
72ee0aef48
[libpng14] Fixed png_save_int_32 when int is not 2's complement (John Bowler).
2015-08-21 14:56:49 -05:00
Glenn Randers-Pehrson
627c2c8797
[libpng14] Bump version to 1.4.17beta02
2015-08-19 12:48:53 -05:00
Glenn Randers-Pehrson
cbd9e435ad
[libpng14] Imported from libpng-1.4.17beta01.tar
2015-08-19 12:48:36 -05:00
Glenn Randers-Pehrson
41de766f12
[libpng14] Fixed the recently reported 1's complement security issue by
...
replacing the value that is illegal in the PNG spec, in both signed and
unsigned values, with 0. Illegal unsigned values (anything greater than or equal
to 0x80000000) can still pass through, but since these are not illegal
in ANSI-C (unlike 0x80000000 in the signed case) the checking that
occurs later can catch them (John Bowler).
Safely convert num_bytes to a png_byte in png_set_sig_bytes() (Robert
Seacord).
2015-08-19 12:47:00 -05:00
