[libGD] #86 [Comment added] Possible infinite loop in libgd/gd_png.c (inside png_set_read_fn() callback) with truncated input

[email protected] (libGD) Wed, 16 May 2007 12:58:28 +0000
Newsgroups php.gd.bugs
Message-ID <[email protected]>
THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.

The following task has a new comment added:

FS#86 - Possible infinite loop in libgd/gd_png.c (inside png_set_read_fn() callback) with truncated input
User who did this - Pierre Joye (Pierre)

----------
I cannot test it right now but have you tried to read it directly with the libpng (sample codes for example)?

At this stage, gd has no control over the reading process, we checked the signature and then pass the data to the libpng. The backtrace looks like you are refering to  CVE-2007-2445, which is a libpng issue and fixed in libpng 1.2.17. Is it correct?
----------

More information can be found at the following URL:
http://bugs.libgd.org/?do=details&task_id=86#comment262

You are receiving this message because you have requested it from the Flyspray bugtracking system.  If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.