John Bowler
92a7c79db2
[libpng16] Reject oversized iCCP profile length
...
The code now validates the ICC profile length against the user chunk limit
before the buffer is allocated, as opposed to doing it while the buffer is read.
This removes the potential to consume virtual address space with a carefully
crafted ICC profile; only an issue on 32-bit systems where a valid profile can
be up to 2^32-4 bytes in length. libpng never writes beyond the application
supplied limit, but previously it did allocate a buffer of the size specified in
the profile header. The exploitability of this is almost zero; the address
space is released as soon as the PNG read completes.
Also clean up PNG_DEBUG compile of pngtest.c.
Signed-off-by: John Bowler <jbowler@acm.org>
2016-08-10 15:35:09 -07:00
Glenn Randers-Pehrson
cdc0e74ee6
[libpng16] Bump version to 1.6.25beta01
2016-08-03 21:59:27 -05:00
Glenn Randers-Pehrson
b50d5cea2b
[libpng16] Imported from libpng-1.6.24.tar
2016-08-03 21:32:26 -05:00
Glenn Randers-Pehrson
3d3c23b39f
[libpng16] Bump version to 1.6.24rc04
2016-08-02 12:58:15 -05:00
Glenn Randers-Pehrson
99663e95f8
[libpng16] Bump version to 1.6.24rc03
2016-08-01 18:00:51 -05:00
Glenn Randers-Pehrson
1153ddccb6
[libpng16] Imported from libpng-1.6.24rc02.tar
2016-08-01 18:00:40 -05:00
Glenn Randers-Pehrson
faa3e537e1
[libpng16] Imported from libpng-1.6.24rc01.tar
2016-07-25 07:53:38 -05:00
Glenn Randers-Pehrson
d1f9149d8a
[libpng16] Bump version to 1.6.24beta07
2016-07-19 17:01:50 -05:00
Glenn Randers-Pehrson
dd70604cec
[libpng16] Fixed more indentation
2016-07-15 11:20:46 -05:00
Glenn Randers-Pehrson
baed0e32f9
[libpng16] Bump version to 1.6.24beta06
2016-07-14 09:55:45 -05:00
Glenn Randers-Pehrson
0fd9a249de
[libpng16] Update "last changed" dates
2016-07-13 16:29:22 -05:00
Glenn Randers-Pehrson
192e92d681
[libpng16] Fixed some indentation to comply with our coding style.
2016-07-13 14:43:42 -05:00
Glenn Randers-Pehrson
1b9f4817c8
[libpng16] Bump version to 1.6.24beta05
2016-07-08 10:14:50 -05:00
Glenn Randers-Pehrson
9928ee0a52
[libpng16] Bump version to 1.6.24beta04
2016-07-04 09:55:49 -05:00
Glenn Randers-Pehrson
d43f93ff93
[libpng16] Bump version to 1.6.24beta03
2016-06-23 11:27:12 -05:00
Glenn Randers-Pehrson
3f2879bf60
[libpng16] Imported from libpng-1.6.24beta02.tar
2016-06-23 11:26:59 -05:00
Glenn Randers-Pehrson
ee1e535298
[libpng16] Bump version to 1.6.24beta03
2016-06-23 11:08:14 -05:00
Glenn Randers-Pehrson
4a8105e925
[libpng16] Bump version to 1.6.24beta02
2016-06-11 18:07:44 -05:00
Glenn Randers-Pehrson
428f5ddabd
[libpng16] Bump version to 1.6.24beta01
2016-06-11 14:10:03 -05:00
Glenn Randers-Pehrson
ed6db9d86b
[libpng16] Imported from libpng-1.6.23.tar
2016-06-09 06:49:42 -05:00
Glenn Randers-Pehrson
6d4e4d0cce
[libpng16] Imported from libpng-1.6.23rc02.tar
2016-06-03 21:28:20 -05:00
Glenn Randers-Pehrson
1fdac25f66
[libpng16] Imported from libpng-1.6.23rc01.tar
2016-06-01 19:17:57 -05:00
Glenn Randers-Pehrson
a201f859cd
[libpng16] Bump version to 1.6.23beta02
2016-05-29 09:52:31 -05:00
Glenn Randers-Pehrson
4e34fd3b8a
[libpng16] Bump version to 1.6.23beta01
2016-05-27 19:48:24 -05:00
Glenn Randers-Pehrson
ac43a87820
[libpng16] Imported from libpng-1.6.22.tar
2016-05-26 07:25:14 -05:00
Glenn Randers-Pehrson
474751e6b2
[libpng16] Bump version to 1.6.22rc04
2016-05-18 07:32:07 -05:00
Glenn Randers-Pehrson
37ab4d946c
[libpng16] Imported from libpng-1.6.22rc03.tar
2016-05-18 07:26:06 -05:00
Glenn Randers-Pehrson
add4581894
[libpng16] Imported from libpng-1.6.22rc02.tar
2016-05-16 16:18:48 -05:00
Glenn Randers-Pehrson
f6ca49c863
[libpng16] Imported from libpng-1.6.22rc01.tar
2016-05-14 09:47:55 -05:00
Glenn Randers-Pehrson
7fa1b5b26c
[libpng16] Bump version to 1.6.22beta07
2016-05-05 19:38:04 -05:00
Glenn Randers-Pehrson
830608b4b8
[libpng16] Bump version to 1.6.22beta06
2016-04-27 13:01:29 -05:00
Glenn Randers-Pehrson
daf2169797
[libpng16] Bump version to 1.6.22beta05
2016-04-05 19:38:42 -05:00
Glenn Randers-Pehrson
edad4639cf
[libpng16] Bump version to 1.6.22beta04
2016-03-09 12:04:48 -06:00
Glenn Randers-Pehrson
461c7e45b5
[libpng16] Bump version to 1.6.22beta03
2016-02-08 17:13:14 -06:00
John Bowler
ac796d3f9a
Only use exit(77) in configure builds
...
Signed-off-by: John Bowler <jbowler@acm.org>
2016-01-26 17:55:39 -08:00
Glenn Randers-Pehrson
e0ce90ea0a
[libpng16] Bump version to 1.6.22beta02
2016-01-23 14:58:07 -06:00
Glenn Randers-Pehrson
5031c77d85
[libpng16] Bump version to 1.6.22beta01
2016-01-16 08:00:09 -06:00
Glenn Randers-Pehrson
fc0786a442
[libpng16] Imported from libpng-1.6.21.tar
2016-01-15 13:51:06 -06:00
Glenn Randers-Pehrson
ecc022ee5f
[libpng16] Bump version to libpng-1.6.21rc02.tar
2016-01-06 13:26:32 -06:00
Glenn Randers-Pehrson
092b8d7bf3
[libpng16] Imported from libpng-1.6.21rc01.tar
2016-01-04 08:24:14 -06:00
Glenn Randers-Pehrson
66db757dd4
[libpng16] Happy 2016! Updated copyright year
2016-01-02 13:40:27 -06:00
Glenn Randers-Pehrson
dea53bb460
[libpng16] Bump version to 1.6.21beta04
2015-12-19 10:48:20 -06:00
Glenn Randers-Pehrson
ad29c03711
[libpng16] Bump version to 1.6.21beta03
2015-12-13 23:24:36 -06:00
Glenn Randers-Pehrson
4d8de33979
[libpng16] Update copyright uears in source files.
2015-12-13 22:41:17 -06:00
Glenn Randers-Pehrson
f3da771890
[libpng16] Bump version to 1.6.21beta02
2015-12-11 19:21:01 -06:00
Glenn Randers-Pehrson
0de0101fdd
[libpng16] Bump version to 1.6.21beta01
2015-12-08 22:19:15 -06:00
Glenn Randers-Pehrson
5b6a6f914b
[libpng16] Imported from libpng-1.6.20.tar
2015-12-02 22:30:37 -06:00
Glenn Randers-Pehrson
030e12ec39
[libpng16] Bump version to libpng-1.6.20rc02.tar
2015-11-29 16:10:46 -06:00
Glenn Randers-Pehrson
e7092bc59c
[libpng16] Imported from libpng-1.6.20rc01.tar
2015-11-26 07:04:24 -06:00
Glenn Randers-Pehrson
92ec30a3b1
[libpng16] Imported from libpng-1.6.20beta03.tar
2015-11-24 09:34:02 -06:00
