John Bowler d29413a2a9 [libpng17] Do not read invalid sBIT chunks. Previously libpng only checked sBIT ...

values on write, so a malicious PNG writer could therefore cause
the read code to return an invalid sBIT chunk, which might lead to
application errors or crashes.  Such chunks are now skipped (with
chunk_benign_error).

2014-02-05 12:15:42 -06:00

28 KiB

Raw Blame History

View Raw