[libGD] #86 [Comment added] Possible infinite loop in libgd/gd_png.c (inside png_set_read_fn() callback) with truncated input
[email protected] (libGD) Wed, 16 May 2007 12:58:28 +0000
| Newsgroups | php.gd.bugs |
|---|---|
| Message-ID | <[email protected]> |
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY. The following task has a new comment added: FS#86 - Possible infinite loop in libgd/gd_png.c (inside png_set_read_fn() callback) with truncated input User who did this - Pierre Joye (Pierre) ---------- I cannot test it right now but have you tried to read it directly with the libpng (sample codes for example)? At this stage, gd has no control over the reading process, we checked the signature and then pass the data to the libpng. The backtrace looks like you are refering to CVE-2007-2445, which is a libpng issue and fixed in libpng 1.2.17. Is it correct? ---------- More information can be found at the following URL: http://bugs.libgd.org/?do=details&task_id=86#comment262 You are receiving this message because you have requested it from the Flyspray bugtracking system. If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.