libpng-1.4.10 is available
Glenn Randers-Pehrson <[email protected]> Thu, 15 Mar 2012 00:49:59 -0400
| Newsgroups | gmane.comp.graphics.png.announce |
|---|---|
| Message-ID | <CA+PdXcunHPVTHStt2Qu845TnXQjTbdDfdSmFqLvdMEfsYSJU-Q__13819.2514576533$1331787029$gmane$org@mail.gmail.com> |
libpng-1.4.10 is available from
ftp://ftp.simplesystems.org/png/src
and from
http://libpng.sf.net
Changes since the last public release (1.4.9):
Removed two useless #ifdef directives from pngread.c and one from pngrutil.c
Eliminated redundant png_push_read_tEXt|zTXt|iTXt|unknown code from
pngpread.c and use the sequential png_handle_tEXt, etc., in pngrutil.c;
now that png_ptr->buffer is inaccessible to applications, the special
handling is no longer useful.
Fixed bug with png_handle_hIST with odd chunk length (Frank Busse).
Fixed incorrect type (int copy should be png_size_t copy) in png_inflate().
Fixed off-by-one bug in png_handle_sCAL() when using fixed point arithmetic,
causing out-of-bounds read in png_set_sCAL() because of failure to copy
the string terminators. This bug was introduced in libpng-1.0.6 (Frank
Busse).
Removed the png_free() of unused png_ptr->current_text from pngread.c.
Fixed PNG_LIBPNG_BUILD_BASE_TYPE definition in png.h
"Fixed incorrect type" fixes CVE-2011-3045.
Glenn
------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here
http://p.sf.net/sfu/sfd2d-msazure