Revisions of libpng16
buildservice-autocommit
accepted
request 424160
from
Petr Gajdos (pgajdos)
(revision 85)
baserev update by copy to link target
Petr Gajdos (pgajdos)
committed
(revision 84)
- update to 1.6.25: Reject oversized iCCP profile immediately. Conditionally compile png_inflate(). Don't install pngcp; it conflicts with pngcp in the pngtools package. Added MIPS support (Mandar Sahastrabuddhe <
buildservice-autocommit
accepted
request 416863
from
Petr Gajdos (pgajdos)
(revision 83)
baserev update by copy to link target
Petr Gajdos (pgajdos)
committed
(revision 82)
- update to 1.6.24: Avoid potential overflow of the PNG_IMAGE_SIZE macro. Correct filter heuristic overflow handling. Use a more efficient absolute value calculation on SSE2. Added pngcp. etc. see ANNOUNCE
Petr Gajdos (pgajdos)
accepted
request 416808
from
Ferdinand Thiessen (susnux)
(revision 81)
Update to 1.6.23 Some possible security fixes.
buildservice-autocommit
accepted
request 398278
from
Petr Gajdos (pgajdos)
(revision 80)
baserev update by copy to link target
Petr Gajdos (pgajdos)
committed
(revision 79)
- update to 1.6.22: Added a png_image_write_to_memory() API and a number of assist macros to allow an application that uses the simplified API write to bypass stdio and write directly to memory. Relaxed limit checks on gamma values in pngrtran.c. As suggested in the comments gamma values outside the range currently permitted by png_set_alpha_mode are useful for HDR data encoding. These values are already permitted by png_set_gamma so it is reasonable caution to extend the png_set_alpha_mode range as HDR imaging systems are starting to emerge. Restored "& 0xff" in png_save_uint_16() and png_save_uint_32() that were accidentally removed from libpng-1.6.17. Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h (Robert C. Seacord). Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.). SSE filter speed improvements for bpp=3: memcpy-free implementations of load3() / store3(). Added PNG_FAST_FILTERS macro (defined as PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).
buildservice-autocommit
accepted
request 354392
from
Ismail Dönmez (namtrac)
(revision 78)
baserev update by copy to link target
Ismail Dönmez (namtrac)
accepted
request 354391
from
Jan Engelhardt (jengelh)
(revision 77)
- Update to new upstream release 1.6.21
buildservice-autocommit
accepted
request 347335
from
Petr Gajdos (pgajdos)
(revision 76)
baserev update by copy to link target
Petr Gajdos (pgajdos)
committed
(revision 75)
- update to 1.6.20: Avoid potential pointer overflow/underflow in png_handle_sPLT() and png_handle_pCAL() (Bug report by John Regehr). Fixed incorrect implementation of png_set_PLTE() that uses png_ptr not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126 vulnerability. Backported tests from libpng-1.7.0beta69. Fixed an error in handling of bad zlib CMINFO field in pngfix, found by American Fuzzy Lop, reported by Brian Carpenter. inflate() doesn't immediately fault a bad CMINFO field; instead a 'too far back' error happens later (at least some times). pngfix failed to limit CMINFO to the allowed values but then assumed that window_bits was in range, triggering an assert. The bug is mostly harmless; the PNG file cannot be fixed. In libpng 1.6 zlib initialization was changed to use the window size in the zlib stream, not a fixed value. This causes some invalid images, where CINFO is too large, to display 'correctly' if the rest of the data is valid. This provides a workaround for zlib versions where the error arises (ones that support the API change to use the window size in the stream).
buildservice-autocommit
accepted
request 344157
from
Petr Gajdos (pgajdos)
(revision 74)
baserev update by copy to link target
Petr Gajdos (pgajdos)
committed
(revision 73)
- update to 1.6.19: Fixed potential leak of png_pixels in contrib/pngminus/pnm2png.c Fixed uninitialized variable in contrib/gregbook/rpng2-x.c Fixed the recently reported 1's complement security issue. Fixed png_save_int_32 when int is not 2's complement by replacing the value that is illegal in the PNG spec, in both signed and unsigned values, with 0. etc., see ANNOUNCE and CHANGES for details - removed: libpng-rgb_to_gray-checks.patch (upstreamed)
buildservice-autocommit
accepted
request 323168
from
Factory Maintainer (factory-maintainer)
(revision 72)
baserev update by copy to link target
Petr Gajdos (pgajdos)
committed
(revision 71)
- drop unknown configure switch
buildservice-autocommit
accepted
request 293905
from
Petr Gajdos (pgajdos)
(revision 70)
baserev update by copy to link target
Petr Gajdos (pgajdos)
committed
(revision 69)
- updated to 1.6.17:
Petr Gajdos (pgajdos)
committed
(revision 68)
- Fixed rgb_to_gray checks and added tRNS checks to pngvalid.c. + libpng-rgb_to_gray-checks.patch
Petr Gajdos (pgajdos)
committed
(revision 67)
- updated to 1.6.27: Corrected the width limit calculation in png_check_IHDR(). Removed user limits from pngfix. Also pass NULL pointers to png_read_row to skip the unnecessary row de-interlace stuff. Implement previously untested cases of libpng transforms in pngvalid.c Fixed byte order in 2-byte filler, in png_do_read_filler(). Made the check for out-of-range values in png_set_tRNS() detect values that are exactly 2^bit_depth, and work on 16-bit platforms. Merged some parts of libpng-1.6.17beta01 and libpng-1.7.0beta47. Added #ifndef __COVERITY__ where needed in png.c, pngrutil.c and pngset.c to avoid warnings about dead code. Do not build png_product2() when it is unused. Display user limits in the output from pngtest. Eliminated the PNG_SAFE_LIMITS macro and restored the 1-million-column and 1-million-row default limits in pnglibconf.dfa, that can be reset by the user at build time or run time. This provides a more robust defense against DOS and as-yet undiscovered overflows. Added PNG_WRITE_CUSTOMIZE_COMPRESSION_SUPPORTED macro, on by default. Allow user to call png_get_IHDR() with NULL arguments (Reuben Hawkins). Moved png_set_filter() prototype into a PNG_WRITE_SUPPORTED block of png.h. Free the unknown_chunks structure even when it contains no data. Fixed simplified 8-bit-linear to sRGB alpha. The calculated alpha value was wrong. It's not clear if this affected the final stored value; in the obvious code path the upper and lower 8-bits of the alpha value were identical and the alpha was truncated to 8-bits rather than dividing by 257 (John Bowler).
buildservice-autocommit
accepted
request 282344
from
Factory Maintainer (factory-maintainer)
(revision 66)
baserev update by copy to link target
Displaying revisions 61 - 80 of 145