Libpng-1.5.20, libpng-1.6.15, and legacy versions 1.0.62, 1.2.52, and 1.4.14 are available

Glenn Randers-Pehrson <[email protected]> Thu, 20 Nov 2014 12:43:53 -0500
Newsgroups gmane.comp.graphics.png.announce
Message-ID <CA+PdXctyUbvdrFRk7hMfrGjqTysbZcmZX+eHvuvuHvm7nPHZZQ__37342.0106283904$1416505475$gmane$org@mail.gmail.com>
--===============7202013657565173984==
Content-Type: multipart/alternative; boundary=001a113a3656353c1b05084ddff0

--001a113a3656353c1b05084ddff0
Content-Type: text/plain; charset=UTF-8

Libpng-1.5.20, libpng-1.6.15, and legacy versions 1.0.62, 1.2.52, and
1.4.14 are
available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net

Versions 1.0.62 and 1.2.52 changes since the last public release (1.0.61
and 1.2.51):
  Avoid out-of-bounds memory access while checking version string in
    pngread.c and pngwrite.c
  Added "-D_CRT_SECURE_NO_DEPRECATE -D_CRT_SECURE_NO_WARNINGS" to
    CFLAGS in scripts/makefile.vcwin32

Version 1.4.14 changes since the last public release (1.4.13):
  Avoid out-of-bounds memory access in png_user_version_check().
  Simplified and future-proofed png_user_version_check().
  Added "-D_CRT_SECURE_NO_WARNINGS" to CFLAGS in scripts/makefile.vcwin32.

Version 1.5.20 changes since the last public release (1.5.19):
  Removed "option WRITE_COMPRESSED_TEXT enables WRITE_TEXT" from
pnglibconf.dfa
  Only mark text chunks as written after successfully writing them.
  Avoid out-of-bounds memory access in png_user_version_check().
  Simplified and future-proofed png_user_version_check().
  Quieted three "comparison is always false due to limited range" compiler
    warnings in pngset.c
  The macros passed in the command line to Borland make were ignored if
    similarly-named macros were already defined in makefiles. This behavior
    is different from POSIX make and other make programs.  Surround the
    macro definitions with ifndef guards (Cosmin).
  Use memcpy instead of CopyMemory in the definition of png_memcpy.
    The Borland C++ build breaks otherwise (Cosmin).
  Added "-D_CRT_SECURE_NO_WARNINGS" to CFLAGS in scripts/makefile.vcwin32
  Removed the obsolete $ARCH variable from scripts/makefile.darwin.

Version 1.6.15 changes since the last public release (1.6.14):
  Changed "if (!x)" to "if (x == 0)" and "if (x)" to "if (x != 0)"
  Simplified png_free_data().
  Added missing "ptr = NULL" after some instances of png_free().
  Made a one-line revision to configure.ac to support ARM on aarch64
    (bug report by Marcin Juszkiewicz, fix by John Bowler).
  Avoid out-of-bounds memory access in png_user_version_check().
  Simplified and future-proofed png_user_version_check().
  Fixed GCC unsigned int->float warnings. Various versions of GCC
    seem to generate warnings when an unsigned value is implicitly
    converted to double. This is probably a GCC bug but this change
    avoids the issue by explicitly converting to (int) where safe.
  Free all allocated memory in pngimage. The file buffer cache was left
    allocated at the end of the program, harmless but it causes memory
    leak reports from clang.
  Fixed array size calculations to avoid warnings. At various points
    in the code the number of elements in an array is calculated using
    sizeof.  This generates a compile time constant of type (size_t) which
    is then typically assigned to an (unsigned int) or (int). Some versions
    of GCC on 64-bit systems warn about the apparent narrowing, even though
    the same compiler does apparently generate the correct, in-range,
    numeric constant.  This adds appropriate, safe, casts to make the
    warnings go away.
  Removed #ifdef PNG_16BIT_SUPPORTED/#endif around png_product2(); it is
    needed by png_reciprocal2().
  Added #ifdef PNG_16BIT_SUPPORTED/#endif around png_log16bit() and
    png_do_swap().
  Changed all "#endif /* PNG_FEATURE_SUPPORTED */" to "#endif /* FEATURE */"
  The macros passed in the command line to Borland make were ignored if
    similarly-named macros were already defined in makefiles. This behavior
    is different from POSIX make and other make programs.  Surround the
    macro definitions with ifndef guards (Cosmin).
  Added "-D_CRT_SECURE_NO_WARNINGS" to CFLAGS in scripts/makefile.vcwin32.
  Removed the obsolete $ARCH variable from scripts/makefile.darwin.

Glenn

--001a113a3656353c1b05084ddff0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div>Libpng-1.5.20, libpng-1.6.15, and legacy version=
s 1.0.62, 1.2.52, and 1.4.14 are<br>available from<br><a href=3D"ftp://ftp.=
simplesystems.org/pub/png/src">ftp://ftp.simplesystems.org/pub/png/src</a><=
br></div>and from<br></div><a href=3D"http://libpng.sf.net">http://libpng.s=
f.net</a><br><div><div><div><br>Versions 1.0.62 and 1.2.52 changes since th=
e last public release (1.0.61 and 1.2.51):<br>=C2=A0 Avoid out-of-bounds me=
mory access while checking version string in<br>=C2=A0=C2=A0=C2=A0 pngread.=
c and pngwrite.c<br>=C2=A0 Added &quot;-D_CRT_SECURE_NO_DEPRECATE -D_CRT_SE=
CURE_NO_WARNINGS&quot; to<br>=C2=A0=C2=A0=C2=A0 CFLAGS in scripts/makefile.=
vcwin32<br><br>Version 1.4.14 changes since the last public release (1.4.13=
):<br>=C2=A0 Avoid out-of-bounds memory access in png_user_version_check().=
<br>=C2=A0 Simplified and future-proofed png_user_version_check().<br>=C2=
=A0 Added &quot;-D_CRT_SECURE_NO_WARNINGS&quot; to CFLAGS in scripts/makefi=
le.vcwin32.<br><br>Version 1.5.20 changes since the last public release (1.=
5.19):<br>=C2=A0 Removed &quot;option WRITE_COMPRESSED_TEXT enables WRITE_T=
EXT&quot; from pnglibconf.dfa<br>=C2=A0 Only mark text chunks as written af=
ter successfully writing them.<br>=C2=A0 Avoid out-of-bounds memory access =
in png_user_version_check().<br>=C2=A0 Simplified and future-proofed png_us=
er_version_check().<br>=C2=A0 Quieted three &quot;comparison is always fals=
e due to limited range&quot; compiler<br>=C2=A0=C2=A0=C2=A0 warnings in png=
set.c<br>=C2=A0 The macros passed in the command line to Borland make were =
ignored if<br>=C2=A0=C2=A0=C2=A0 similarly-named macros were already define=
d in makefiles. This behavior<br>=C2=A0=C2=A0=C2=A0 is different from POSIX=
 make and other make programs.=C2=A0 Surround the<br>=C2=A0=C2=A0=C2=A0 mac=
ro definitions with ifndef guards (Cosmin).<br>=C2=A0 Use memcpy instead of=
 CopyMemory in the definition of png_memcpy.<br>=C2=A0=C2=A0=C2=A0 The Borl=
and C++ build breaks otherwise (Cosmin).<br>=C2=A0 Added &quot;-D_CRT_SECUR=
E_NO_WARNINGS&quot; to CFLAGS in scripts/makefile.vcwin32<br>=C2=A0 Removed=
 the obsolete $ARCH variable from scripts/makefile.darwin.<br><br>Version 1=
.6.15 changes since the last public release (1.6.14):<br>=C2=A0 Changed &qu=
ot;if (!x)&quot; to &quot;if (x =3D=3D 0)&quot; and &quot;if (x)&quot; to &=
quot;if (x !=3D 0)&quot;<br>=C2=A0 Simplified png_free_data().<br>=C2=A0 Ad=
ded missing &quot;ptr =3D NULL&quot; after some instances of png_free().<br=
>=C2=A0 Made a one-line revision to <a href=3D"http://configure.ac">configu=
re.ac</a> to support ARM on aarch64<br>=C2=A0=C2=A0=C2=A0 (bug report by Ma=
rcin Juszkiewicz, fix by John Bowler).<br>=C2=A0 Avoid out-of-bounds memory=
 access in png_user_version_check().<br>=C2=A0 Simplified and future-proofe=
d png_user_version_check().<br>=C2=A0 Fixed GCC unsigned int-&gt;float warn=
ings. Various versions of GCC<br>=C2=A0=C2=A0=C2=A0 seem to generate warnin=
gs when an unsigned value is implicitly<br>=C2=A0=C2=A0=C2=A0 converted to =
double. This is probably a GCC bug but this change<br>=C2=A0=C2=A0=C2=A0 av=
oids the issue by explicitly converting to (int) where safe.<br>=C2=A0 Free=
 all allocated memory in pngimage. The file buffer cache was left<br>=C2=A0=
=C2=A0=C2=A0 allocated at the end of the program, harmless but it causes me=
mory<br>=C2=A0=C2=A0=C2=A0 leak reports from clang.<br>=C2=A0 Fixed array s=
ize calculations to avoid warnings. At various points<br>=C2=A0=C2=A0=C2=A0=
 in the code the number of elements in an array is calculated using<br>=C2=
=A0=C2=A0=C2=A0 sizeof.=C2=A0 This generates a compile time constant of typ=
e (size_t) which<br>=C2=A0=C2=A0=C2=A0 is then typically assigned to an (un=
signed int) or (int). Some versions<br>=C2=A0=C2=A0=C2=A0 of GCC on 64-bit =
systems warn about the apparent narrowing, even though<br>=C2=A0=C2=A0=C2=
=A0 the same compiler does apparently generate the correct, in-range,<br>=
=C2=A0=C2=A0=C2=A0 numeric constant.=C2=A0 This adds appropriate, safe, cas=
ts to make the<br>=C2=A0=C2=A0=C2=A0 warnings go away.<br>=C2=A0 Removed #i=
fdef PNG_16BIT_SUPPORTED/#endif around png_product2(); it is<br>=C2=A0=C2=
=A0=C2=A0 needed by png_reciprocal2().<br>=C2=A0 Added #ifdef PNG_16BIT_SUP=
PORTED/#endif around png_log16bit() and<br>=C2=A0=C2=A0=C2=A0 png_do_swap()=
.<br>=C2=A0 Changed all &quot;#endif /* PNG_FEATURE_SUPPORTED */&quot; to &=
quot;#endif /* FEATURE */&quot;<br>=C2=A0 The macros passed in the command =
line to Borland make were ignored if<br>=C2=A0=C2=A0=C2=A0 similarly-named =
macros were already defined in makefiles. This behavior<br>=C2=A0=C2=A0=C2=
=A0 is different from POSIX make and other make programs.=C2=A0 Surround th=
e<br>=C2=A0=C2=A0=C2=A0 macro definitions with ifndef guards (Cosmin).<br>=
=C2=A0 Added &quot;-D_CRT_SECURE_NO_WARNINGS&quot; to CFLAGS in scripts/mak=
efile.vcwin32.<br>=C2=A0 Removed the obsolete $ARCH variable from scripts/m=
akefile.darwin.<br><br></div><div>Glenn<br></div></div></div></div>

--001a113a3656353c1b05084ddff0--


--===============7202013657565173984==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
from Actuate! Instantly Supercharge Your Business Reports and Dashboards
with Interactivity, Sharing, Native Excel Exports, App Integration & more
Get technology previously reserved for billion-dollar corporations, FREE
http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk
--===============7202013657565173984==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
png-mng-announce mailing list
png-mng-announce-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/png-mng-announce

--===============7202013657565173984==--