Re: libpng-1.5.27 and 1.6.22 are available (corrected link)

Glenn Randers-Pehrson <[email protected]> Thu, 26 May 2016 09:17:59 -0400
Newsgroups gmane.comp.graphics.png.announce
Message-ID <CA+PdXcv4Kjhe_Cibji556+sVs4oR7GjD=+Sotm-omy-SFWRW1w__28762.438419699$1464268755$gmane$org@mail.gmail.com>
--===============4653281741503089603==
Content-Type: multipart/alternative; boundary=001a1141bb2c7f45880533be9e98

--001a1141bb2c7f45880533be9e98
Content-Type: text/plain; charset=UTF-8

On Thu, May 26, 2016 at 9:10 AM, Glenn Randers-Pehrson <[email protected]>
wrote:

> libpng-1.5.27 and 1.6.22 are available from
> ftp://ftp.simplesystems.org/pub/png/src/
> and from
> http://lbpng.sf.net
>

http://libpng.sf.net/


>
>
> Version 1.5.27:
>   Removed LE/BE dependencies in pngvalid, to 'fix' the current problem
>     in the BigEndian tests by not testing it, making the BE code the same
>     as the LE version.
>   Fixes to pngvalid for various reduced build configurations (eliminate
> unused
>     statics) and a fix for the case in rgb_to_gray when the digitize option
>     reduces graylo to 0, producing a large error.
>   Widened the 'limit' check on the internally calculated error limits in
>     the 'DIGITIZE' case (the code used prior to 1.7 for rgb_to_gray error
>     checks) and changed the check to only operate in non-release builds
>    (base build type not RC or RELEASE.)
>   Fixed undefined behavior in pngvalid.c, undefined because
>     (png_byte) << shift is undefined if it changes the signed bit
>     (because png_byte is promoted to int). The libpng exported functions
>     png_get_uint_32 and png_get_uint_16 handle this. (Bug reported by
>     David Drysdale as a result of reports from UBSAN in clang 3.8).
>   This changes pngvalid to use BE random numbers; this used to produce
>     errors but these should not be fixed as a result of the previous
> changes.
>   In projects/vstudio, combined readme.txt and WARNING into README.txt
>   Worked around a false-positive Coverity issue in pngvalid.c.
>   Only use exit(77) from pngvalid.c in configure builds.
>   Updated CMakeLists.txt, added supporting scripts/gen*.cmake.in
>     and test.cmake.in (Roger Leigh).
>   Added a common-law trademark notice and export control information
>     to the LICENSE file, png.h, and the man page.
>   Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
>     (Robert C. Seacord).
>   Fixed some misleading indentation in pngvalid.c (Krishnaraj Bhat).
>   Fixed typo (missing underscore) in #define PNG_READ_16_TO_8_SUPPORTED
>     Bug report by (Y.Ohashik).
>   Added PNG_FAST_FILTERS macro (defined as
>     PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).
>
> Version 1.6.22
>   Changed PNG_USE_MKSTEMP to __COVERITY__ to select alternate
>     "tmpfile()" implementation in contrib/libtests/pngstest.c
>   Fixed NO_STDIO build of pngunknown.c to skip calling png_init_io()
>     if there is no stdio.h support.
>   Added a png_image_write_to_memory() API and a number of assist macros
>     to allow an application that uses the simplified API write to bypass
>     stdio and write directly to memory.
>   Added some warnings (png.h) and some check code to detect *possible*
>     overflow in the ROW_STRIDE and simplified image SIZE macros.  This
>     disallows image width/height/format that *might* overflow.  This is
>     a quiet API change that limits in-memory image size (uncompressed) to
>     less than 4GByte and image row size (stride) to less than 2GByte.
>   Revised workaround for false-positive Coverity issue in pngvalid.c.
>   Only use exit(77) in configure builds.
>   Updated CMakeLists.txt, added supporting scripts/gen*.cmake.in
>     and test.cmake.in (Roger Leigh).
>   Relaxed limit checks on gamma values in pngrtran.c. As suggested in
>     the comments gamma values outside the range currently permitted
>     by png_set_alpha_mode are useful for HDR data encoding.  These values
>     are already permitted by png_set_gamma so it is reasonable caution to
>     extend the png_set_alpha_mode range as HDR imaging systems are starting
>     to emerge.
>   Added a common-law trademark notice and export control information
>     to the LICENSE file, png.h, and the man page.
>   Restored "& 0xff" in png_save_uint_16() and png_save_uint_32() that
>     were accidentally removed from libpng-1.6.17.
>   Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h
>     (Robert C. Seacord).
>   Removed dubious "#if INT_MAX" test from png.h that was added to
>     libpng-1.6.19 (John Bowler).
>   Add ${INCLUDES} in scripts/genout.cmake.in (Bug report by Nixon Kwok).
>   Updated LICENSE to say files in the contrib directory are not
>     necessarily under the libpng license, and that some makefiles have
>     other copyright owners.
>   Added INTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).
>   Made contrib/libtests/timepng more robust.  The code no longer gives
>     up/fails on invalid PNG data, it just skips it (with error messages).
>     The code no longer fails on PNG files with data beyond IEND.  Options
>     exist to use png_read_png (reading the whole image, not by row) and, in
>     that case, to apply any of the supported transforms.  This makes for
>     more realistic testing; the decoded data actually gets used in a
>     meaningful fashion (John Bowler).
>   Fixed some misleading indentation (Krishnaraj Bhat).
>   Force GCC compilation to C89 if needed (Dagobert Michelsen).
>   SSE filter speed improvements for bpp=3:
>     memcpy-free implementations of load3() / store3().
>     call load3() only when needed at the end of a scanline.
>   Added PNG_FAST_FILTERS macro (defined as
>     PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_UP).
>   Various fixes for contrib/libtests/timepng.c
>   Fixed typo (missing underscore) in #define PNG_READ_16_TO_8_SUPPORTED
>     (Bug report by Y.Ohashik).
>   Quieted two Coverity issues in contrib/libtests/timepng.c.
>   Fixed issues with scripts/genout.cmake.in (David Capello, Nixon Kwok):
>     Added support to use multiple directories in ZLIBINCDIR variable,
>     Fixed CMAKE_C_FLAGS with multiple values when genout is compiled on
> MSVC,
>     Fixed pnglibconf.c compilation on OS X including the sysroot path.
>   Check for CLOCK_PROCESS_CPUTIME_ID when building
> /contrib/libtests/timepng.
>   Check for the presence of clock_gettime() in configure.ac and
> Makefile.am.
>
> Glenn
>
>

--001a1141bb2c7f45880533be9e98
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Thu, May 26, 2016 at 9:10 AM, Glenn Randers-Pehrson <span dir=3D"ltr=
">&lt;<a href=3D"mailto:[email protected]" target=3D"_blank">glennrp@gmail.=
com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"mar=
gin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr=
"><div><div><div><div>libpng-1.5.27 and 1.6.22 are available from<br></div>=
<a href=3D"ftp://ftp.simplesystems.org/pub/png/src/" target=3D"_blank">ftp:=
//ftp.simplesystems.org/pub/png/src/</a><br></div>and from<br></div><a href=
=3D"http://lbpng.sf.net" target=3D"_blank">http://lbpng.sf.net</a></div></d=
iv></blockquote><div><br></div><div><a href=3D"http://libpng.sf.net/">http:=
//libpng.sf.net/</a><br>=C2=A0<br></div><blockquote class=3D"gmail_quote" s=
tyle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div=
 dir=3D"ltr"><div><br><br>Version 1.5.27:<br>=C2=A0 Removed LE/BE dependenc=
ies in pngvalid, to &#39;fix&#39; the current problem<br>=C2=A0=C2=A0=C2=A0=
 in the BigEndian tests by not testing it, making the BE code the same <br>=
=C2=A0=C2=A0=C2=A0 as the LE version.<br>=C2=A0 Fixes to pngvalid for vario=
us reduced build configurations (eliminate unused<br>=C2=A0=C2=A0=C2=A0 sta=
tics) and a fix for the case in rgb_to_gray when the digitize option<br>=C2=
=A0=C2=A0=C2=A0 reduces graylo to 0, producing a large error.<br>=C2=A0 Wid=
ened the &#39;limit&#39; check on the internally calculated error limits in=
<br>=C2=A0=C2=A0=C2=A0 the &#39;DIGITIZE&#39; case (the code used prior to =
1.7 for rgb_to_gray error<br>=C2=A0=C2=A0=C2=A0 checks) and changed the che=
ck to only operate in non-release builds<br>=C2=A0=C2=A0 (base build type n=
ot RC or RELEASE.)<br>=C2=A0 Fixed undefined behavior in pngvalid.c, undefi=
ned because<br>=C2=A0=C2=A0=C2=A0 (png_byte) &lt;&lt; shift is undefined if=
 it changes the signed bit<br>=C2=A0=C2=A0=C2=A0 (because png_byte is promo=
ted to int). The libpng exported functions<br>=C2=A0=C2=A0=C2=A0 png_get_ui=
nt_32 and png_get_uint_16 handle this. (Bug reported by<br>=C2=A0=C2=A0=C2=
=A0 David Drysdale as a result of reports from UBSAN in clang 3.8).<br>=C2=
=A0 This changes pngvalid to use BE random numbers; this used to produce<br=
>=C2=A0=C2=A0=C2=A0 errors but these should not be fixed as a result of the=
 previous changes.<br>=C2=A0 In projects/vstudio, combined readme.txt and W=
ARNING into README.txt<br>=C2=A0 Worked around a false-positive Coverity is=
sue in pngvalid.c.<br>=C2=A0 Only use exit(77) from pngvalid.c in configure=
 builds.<br>=C2=A0 Updated CMakeLists.txt, added supporting scripts/gen*.<a=
 href=3D"http://cmake.in" target=3D"_blank">cmake.in</a><br>=C2=A0=C2=A0=C2=
=A0 and <a href=3D"http://test.cmake.in" target=3D"_blank">test.cmake.in</a=
> (Roger Leigh).<br>=C2=A0 Added a common-law trademark notice and export c=
ontrol information<br>=C2=A0=C2=A0=C2=A0 to the LICENSE file, png.h, and th=
e man page.<br>=C2=A0 Changed PNG_INFO_cHNK and PNG_FREE_cHNK from 0xnnnn t=
o 0xnnnnU in png.h<br>=C2=A0=C2=A0=C2=A0 (Robert C. Seacord).<br>=C2=A0 Fix=
ed some misleading indentation in pngvalid.c (Krishnaraj Bhat).<br>=C2=A0 F=
ixed typo (missing underscore) in #define PNG_READ_16_TO_8_SUPPORTED<br>=C2=
=A0=C2=A0=C2=A0 Bug report by (Y.Ohashik).<br>=C2=A0 Added PNG_FAST_FILTERS=
 macro (defined as<br>=C2=A0=C2=A0=C2=A0 PNG_FILTER_NONE|PNG_FILTER_SUB|PNG=
_FILTER_UP).<br><br>Version 1.6.22<br>=C2=A0 Changed PNG_USE_MKSTEMP to __C=
OVERITY__ to select alternate<br>=C2=A0=C2=A0=C2=A0 &quot;tmpfile()&quot; i=
mplementation in contrib/libtests/pngstest.c<br>=C2=A0 Fixed NO_STDIO build=
 of pngunknown.c to skip calling png_init_io()<br>=C2=A0=C2=A0=C2=A0 if the=
re is no stdio.h support.<br>=C2=A0 Added a png_image_write_to_memory() API=
 and a number of assist macros<br>=C2=A0=C2=A0=C2=A0 to allow an applicatio=
n that uses the simplified API write to bypass<br>=C2=A0=C2=A0=C2=A0 stdio =
and write directly to memory.<br>=C2=A0 Added some warnings (png.h) and som=
e check code to detect *possible*<br>=C2=A0=C2=A0=C2=A0 overflow in the ROW=
_STRIDE and simplified image SIZE macros.=C2=A0 This<br>=C2=A0=C2=A0=C2=A0 =
disallows image width/height/format that *might* overflow.=C2=A0 This is<br=
>=C2=A0=C2=A0=C2=A0 a quiet API change that limits in-memory image size (un=
compressed) to<br>=C2=A0=C2=A0=C2=A0 less than 4GByte and image row size (s=
tride) to less than 2GByte.<br>=C2=A0 Revised workaround for false-positive=
 Coverity issue in pngvalid.c.<br>=C2=A0 Only use exit(77) in configure bui=
lds.<br>=C2=A0 Updated CMakeLists.txt, added supporting scripts/gen*.<a hre=
f=3D"http://cmake.in" target=3D"_blank">cmake.in</a><br>=C2=A0=C2=A0=C2=A0 =
and <a href=3D"http://test.cmake.in" target=3D"_blank">test.cmake.in</a> (R=
oger Leigh).<br>=C2=A0 Relaxed limit checks on gamma values in pngrtran.c. =
As suggested in<br>=C2=A0=C2=A0=C2=A0 the comments gamma values outside the=
 range currently permitted<br>=C2=A0=C2=A0=C2=A0 by png_set_alpha_mode are =
useful for HDR data encoding.=C2=A0 These values<br>=C2=A0=C2=A0=C2=A0 are =
already permitted by png_set_gamma so it is reasonable caution to<br>=C2=A0=
=C2=A0=C2=A0 extend the png_set_alpha_mode range as HDR imaging systems are=
 starting<br>=C2=A0=C2=A0=C2=A0 to emerge.<br>=C2=A0 Added a common-law tra=
demark notice and export control information<br>=C2=A0=C2=A0=C2=A0 to the L=
ICENSE file, png.h, and the man page.<br>=C2=A0 Restored &quot;&amp; 0xff&q=
uot; in png_save_uint_16() and png_save_uint_32() that<br>=C2=A0=C2=A0=C2=
=A0 were accidentally removed from libpng-1.6.17. <br>=C2=A0 Changed PNG_IN=
FO_cHNK and PNG_FREE_cHNK from 0xnnnn to 0xnnnnU in png.h<br>=C2=A0=C2=A0=
=C2=A0 (Robert C. Seacord).<br>=C2=A0 Removed dubious &quot;#if INT_MAX&quo=
t; test from png.h that was added to<br>=C2=A0=C2=A0=C2=A0 libpng-1.6.19 (J=
ohn Bowler).<br>=C2=A0 Add ${INCLUDES} in scripts/<a href=3D"http://genout.=
cmake.in" target=3D"_blank">genout.cmake.in</a> (Bug report by Nixon Kwok).=
<br>=C2=A0 Updated LICENSE to say files in the contrib directory are not<br=
>=C2=A0=C2=A0=C2=A0 necessarily under the libpng license, and that some mak=
efiles have<br>=C2=A0=C2=A0=C2=A0 other copyright owners.<br>=C2=A0 Added I=
NTEL-SSE2 support (Mike Klein and Matt Sarett, Google, Inc.).<br>=C2=A0 Mad=
e contrib/libtests/timepng more robust.=C2=A0 The code no longer gives<br>=
=C2=A0=C2=A0=C2=A0 up/fails on invalid PNG data, it just skips it (with err=
or messages).<br>=C2=A0=C2=A0=C2=A0 The code no longer fails on PNG files w=
ith data beyond IEND.=C2=A0 Options<br>=C2=A0=C2=A0=C2=A0 exist to use png_=
read_png (reading the whole image, not by row) and, in<br>=C2=A0=C2=A0=C2=
=A0 that case, to apply any of the supported transforms.=C2=A0 This makes f=
or<br>=C2=A0=C2=A0=C2=A0 more realistic testing; the decoded data actually =
gets used in a<br>=C2=A0=C2=A0=C2=A0 meaningful fashion (John Bowler).<br>=
=C2=A0 Fixed some misleading indentation (Krishnaraj Bhat).<br>=C2=A0 Force=
 GCC compilation to C89 if needed (Dagobert Michelsen).<br>=C2=A0 SSE filte=
r speed improvements for bpp=3D3:<br>=C2=A0=C2=A0=C2=A0 memcpy-free impleme=
ntations of load3() / store3().<br>=C2=A0=C2=A0=C2=A0 call load3() only whe=
n needed at the end of a scanline.<br>=C2=A0 Added PNG_FAST_FILTERS macro (=
defined as<br>=C2=A0=C2=A0=C2=A0 PNG_FILTER_NONE|PNG_FILTER_SUB|PNG_FILTER_=
UP).<br>=C2=A0 Various fixes for contrib/libtests/timepng.c<br>=C2=A0 Fixed=
 typo (missing underscore) in #define PNG_READ_16_TO_8_SUPPORTED<br>=C2=A0=
=C2=A0=C2=A0 (Bug report by Y.Ohashik).<br>=C2=A0 Quieted two Coverity issu=
es in contrib/libtests/timepng.c.<br>=C2=A0 Fixed issues with scripts/<a hr=
ef=3D"http://genout.cmake.in" target=3D"_blank">genout.cmake.in</a> (David =
Capello, Nixon Kwok):<br>=C2=A0=C2=A0=C2=A0 Added support to use multiple d=
irectories in ZLIBINCDIR variable,<br>=C2=A0=C2=A0=C2=A0 Fixed CMAKE_C_FLAG=
S with multiple values when genout is compiled on MSVC,<br>=C2=A0=C2=A0=C2=
=A0 Fixed pnglibconf.c compilation on OS X including the sysroot path.<br>=
=C2=A0 Check for CLOCK_PROCESS_CPUTIME_ID when building /contrib/libtests/t=
imepng.<br>=C2=A0 Check for the presence of clock_gettime() in <a href=3D"h=
ttp://configure.ac" target=3D"_blank">configure.ac</a> and Makefile.am.<spa=
n class=3D"HOEnZb"><font color=3D"#888888"><br><br></font></span></div><spa=
n class=3D"HOEnZb"><font color=3D"#888888">Glenn<br><div><div><br></div></d=
iv></font></span></div>
</blockquote></div><br></div></div>

--001a1141bb2c7f45880533be9e98--


--===============4653281741503089603==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
--===============4653281741503089603==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
png-mng-announce mailing list
png-mng-announce-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/png-mng-announce

--===============4653281741503089603==--