Re: Endless loop in version 1.6.26

John Bowler <[email protected]>
Newsgroups gmane.comp.graphics.png.devel
Message-ID <CAP7U398NGFVNF6EHVd8FPGdbnsgTtkr-veYnGZvxYmH0cVbouA@mail.gmail.com>
The same change breaks the 1.7 API to control how IDAT errors are
handled.  Prior to the change the app could control whether to ignore
them and get a potentially corrupted but still usable image (1.7 fills
in the unreadable data to counter security issues) or to error out.

With the change the error-out option no longer works for changes to
the zlib stream which change the image but don't invalidate the steam.
There are quite a lot of such changes!

I don't see why it was necessary to duplicate functionality which
already exists; libpng 1.7 an already ignore detectable errors in the
zlib stream, why change the behavior in the case where it isn't doing
this?

Not only that, but I can't see how this behavior can be switched
*off*; it is an unconditional removal of a security feature for all
applications of libpng.  That has to be wrong.

John Bowler

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.