You can subscribe to this list here.
2005 |
Jan
(2) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
(1) |
Aug
(2) |
Sep
|
Oct
|
Nov
|
Dec
|
---|---|---|---|---|---|---|---|---|---|---|---|---|
2006 |
Jan
|
Feb
|
Mar
(1) |
Apr
(3) |
May
|
Jun
(1) |
Jul
|
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
(1) |
2007 |
Jan
(2) |
Feb
|
Mar
|
Apr
(3) |
May
(2) |
Jun
|
Jul
(3) |
Aug
(1) |
Sep
(1) |
Oct
(2) |
Nov
(1) |
Dec
(1) |
2008 |
Jan
|
Feb
(1) |
Mar
(1) |
Apr
(7) |
May
(1) |
Jun
|
Jul
(1) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2009 |
Jan
|
Feb
(1) |
Mar
|
Apr
(1) |
May
(1) |
Jun
(1) |
Jul
(1) |
Aug
(1) |
Sep
(1) |
Oct
|
Nov
|
Dec
(1) |
2010 |
Jan
(2) |
Feb
(2) |
Mar
|
Apr
|
May
|
Jun
(1) |
Jul
|
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
(1) |
2011 |
Jan
(1) |
Feb
(1) |
Mar
(1) |
Apr
(3) |
May
|
Jun
|
Jul
(2) |
Aug
|
Sep
(1) |
Oct
|
Nov
(1) |
Dec
(1) |
2012 |
Jan
|
Feb
(3) |
Mar
(2) |
Apr
|
May
|
Jun
(1) |
Jul
(3) |
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
|
2013 |
Jan
(1) |
Feb
(1) |
Mar
(2) |
Apr
(1) |
May
(1) |
Jun
(1) |
Jul
(2) |
Aug
|
Sep
(3) |
Oct
|
Nov
(1) |
Dec
(1) |
2014 |
Jan
|
Feb
(2) |
Mar
(1) |
Apr
|
May
|
Jun
(2) |
Jul
|
Aug
(1) |
Sep
|
Oct
(1) |
Nov
(1) |
Dec
(1) |
2015 |
Jan
|
Feb
(2) |
Mar
(1) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(1) |
Dec
(2) |
2016 |
Jan
(1) |
Feb
|
Mar
|
Apr
|
May
(2) |
Jun
(1) |
Jul
|
Aug
(2) |
Sep
(2) |
Oct
(1) |
Nov
|
Dec
(2) |
2017 |
Jan
(3) |
Feb
|
Mar
(1) |
Apr
(1) |
May
|
Jun
(4) |
Jul
(3) |
Aug
(1) |
Sep
|
Oct
|
Nov
|
Dec
|
2018 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(1) |
Nov
|
Dec
(1) |
2019 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2022 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(1) |
Oct
|
Nov
(1) |
Dec
|
2023 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
(1) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2024 |
Jan
(2) |
Feb
(1) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
|
From: Glenn Randers-P. <gl...@gm...> - 2011-09-22 16:00:47
|
Libpng-1.5.5 is available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net/index.html Changes since the last public release (1.5.4): Fixed some typos and made other minor changes in the manual. Updated contrib/pngminus/makefile.std (Samuli Souminen) Revised Makefile.am and Makefile.in to look in the right directory for pnglibconf.h.prebuilt Enabled compilation with g++ compiler. This compiler does not recognize the file extension, so it always compiles with C++ rules. Made minor changes to pngrutil.c to cast results where C++ expects it but C does not. Minor editing of libpng.3 and libpng-manual.txt. Revised CMakeLists.txt (Clifford Yapp) Updated commentary about the png_rgb_to_gray() default coefficients in the manual and in pngrtran.c Prevent unexpected API exports from non-libpng DLLs on Windows. The "_DLL" is removed from the test of whether a DLL is being built (this erroneously caused the libpng APIs to be marked as DLL exports in static builds under Microsoft Visual Studio). Almost all of the libpng building configuration is moved from pngconf.h to pngpriv.h, but PNG_DLL_EXPORT remains in pngconf.h, though, so that it is colocated with the import definition (it is no longer used anywhere in the installed headers). The VStudio project definitions have been cleaned up: "_USRDLL" has been removed from the static library builds (this was incorrect), and PNG_USE_DLL has been added to pngvalid to test the functionality (pngtest does not supply it, deliberately). The spurious "_EXPORTS" has been removed from the libpng build (all these errors were a result of copy/paste between project configurations.) Added new types and internal functions for CIE RGB end point handling to pngpriv.h (functions yet to be implemented). Ensure the CMAKE_LIBRARY_OUTPUT_DIRECTORY is set in CMakeLists.txt (Clifford Yap) Fixes to rgb_to_gray and cHRM XYZ APIs (John Bowler): The rgb_to_gray code had errors when combined with gamma correction. Some pixels were treated as true grey when they weren't and such pixels and true grey ones were not gamma corrected (the original value of the red component was used instead). APIs to get and set cHRM using color space end points have been added and the rgb_to_gray code that defaults based on cHRM, and the divide-by-zero bug in png_handle_cHRM (CERT VU#477046, CVE-2011-3328, introduced in 1.5.4) have been corrected. A considerable number of tests has been added to pngvalid for the rgb_to_gray transform. Arithmetic errors in rgb_to_gray whereby the calculated gray value was truncated to the bit depth rather than rounded have been fixed except in the 8-bit non-gamma-corrected case (where consistency seems more important than correctness.) The code still has considerable inaccuracies in the 8-bit case because 8-bit linear arithmetic is used. Added "$(ARCH)" option to makefile.darwin Added SunOS support to configure.ac and Makefile.am Changed png_chunk_benign_error() to png_warning() in png.c, in png_XYZ_from_xy_checked(). Fixed 64-bit compilation errors (gcc). The errors fixed relate to conditions where types that are 32 bits in the GCC 32-bit world (uLong and png_size_t) become 64 bits in the 64-bit world. This produces potential truncation errors that the compiler correctly flags. Constant changes for 64-bit compatibility (removal of L suffixes). The 16-bit cases still use "L" as we don't have a 16-bit test system. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2011-07-09 11:05:38
|
libpng-1.2.46 and 1.0.56 are available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net/index.html These fix a problem with Makefile.in and Makefile.am that caused 1.2.45 and 1.0.55 to fail to build. Also I added some filenames (CMakeLists.txt, projects/xcode, and pnggccrd.c) to the EXTRA_DIST list so "make distcheck" would work properly. I added "make distcheck" to my private build procedure for all versions to help prevent such errors in the future. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2011-07-07 12:53:32
|
libpng-1.5.4, 1.4.8, 1.2.45, and 1.0.55 are available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net There are no changes from the RC01's. All of them fix CVE-2011-2501 and some other minor security problems. version 1.2.45 and 1.0.55 [July 7, 2011] Fixed uninitialized memory read in png_format_buffer() (Bug report by Frank Busse, related to CVE-2004-0421). Pass "" instead of '\0' to png_default_error() in png_err(). This mistake was introduced in libpng-1.2.20beta01. Check for up->location !PNG_AFTER_IDAT when writing unknown chunks before IDAT. Ported bugfix in pngrtran.c from 1.5.3: when expanding a paletted image, always expand to RGBA if transparency is present. Check for integer overflow in png_set_rgb_to_gray(). Check for sCAL chunk too short. libpng-1.4.8 changes since the last public release (1.4.7): Undef "_ALL_SOURCE" for AIX, to prevent "jmpbuf" from being redefined. Copied png_debug macros from pngpriv.h into pngtest.c and removed "#include pngpriv.h" from pngtest.c, to avoid setting a bad example. Pass "" instead of '\0' to png_default_error() in png_err(). This mistake was introduced in libpng-1.2.20beta01. Check for up->location !PNG_AFTER_IDAT when writing unknown chunks before IDAT. Ported bugfix in pngrtran.c from 1.5.3: when expanding a paletted image, always expand to RGBA if transparency is present. Ported bugfix in pngrtran.c from 1.5.3: Ensure coefficients are OK for png_rgb_to_gray_fixed(); check for integer overflow in png_set_rgb_to_gray(). Fixed uninitialized memory read in png_format_buffer() (Bug report by Frank Busse, related to CVE-2004-0421). Fixed error in "ACCURATE" 16-to-8 scaling (John Bowler). Check for sCAL chunk too short. libpng-1.5.4 changes since the last public release (1.5.2): Re-initialize the zlib compressor before compressing non-IDAT chunks. Added API functions to set parameters for zlib compression of non-IDAT chunks. Updated scripts/symbols.def with new API functions. Only compile the new zlib re-initializing code when text or iCCP is supported, using PNG_WRITE_COMPRESSED_TEXT_SUPPORTED macro. Improved the optimization of the zlib CMF byte (see libpng-1.2.6). Optimize the zlib CMF byte in non-IDAT compressed chunks Fixed gcc -ansi -pedantic compile. A strict ANSI system does not have snprintf, and the "__STRICT_ANSI__" detects that condition more reliably than __STDC__ (John Bowler). Removed the PNG_PTR_NORETURN attribute because it too dangerous. It tells the compiler that a user supplied callback (the error handler) does not return, yet there is no guarantee in practice that the application code will correctly implement the error handler because the compiler only issues a warning if there is a mistake (John Bowler). Removed the no-longer-used PNG_DEPSTRUCT macro. Updated the zlib version to 1.2.5 in the VStudio project. Fixed 64-bit builds where png_uint_32 is smaller than png_size_t in pngwutil.c (John Bowler). Fixed bug with stripping the filler or alpha channel when writing, that was introduced in libpng-1.5.2 (bug report by Andrew Church). Updated pngtest.png with the new zlib CMF optimization. Cleaned up conditional compilation code and of background/gamma handling Internal changes only except a new option to avoid compiling the png_build_grayscale_palette API (which is not used at all internally.) The main change is to move the transform tests (READ_TRANSFORMS, WRITE_TRANSFORMS) up one level to the caller of the APIs. This avoids calls to spurious functions if all transforms are disabled and slightly simplifies those functions. Pngvalid modified to handle this. A minor change is to stop the strip_16 and expand_16 interfaces from disabling each other; this allows the future alpha premultiplication code to use 16-bit intermediate values while still producing 8-bit output. png_do_background and png_do_gamma have been simplified to take a single pointer to the png_struct rather than pointers to every item required from the png_struct. This makes no practical difference to the internal code. A serious bug in the pngvalid internal routine 'standard_display_init' has been fixed - this failed to initialize the red channel and accidentally initialized the alpha channel twice. Changed png_struct jmp_buf member name from png_jmpbuf to tmp_jmpbuf to avoid a clash with the png_jmpbuf macro on some platforms. Added appropriate feature test macros to ensure libpng sees the correct API _POSIX_SOURCE is defined in pngpriv.h, pngtest.c and pngvalid.c to ensure that POSIX conformant systems disable non-POSIX APIs. _ISOC99_SOURCE is defined in pngpriv.h to obtain the ISO C99 snprintf definition, when available. Removed png_snprintf and added formatted warning messages. This change adds internal APIs to allow png_warning messages to have parameters without requiring the host OS to implement snprintf. As a side effect the dependency of the tIME-supporting RFC1132 code on stdio is removed and PNG_NO_WARNINGS does actually work now. Added PNG_WRITE_OPTIMIZE_CMF_SUPPORTED macro to make the zlib "CMF" byte optimization configureable. Internal functions were added to claim/release the z_stream and, hopefully, make the code more robust. Also deflateEnd checking is added - previously libpng would ignore an error at the end of the stream. Removed the -D_ALL_SOURCE from definitions for AIX in CMakeLists.txt Implemented premultiplied alpha support: png_set_alpha_mode API Added expand_16 support to the high level interface. Added named value and 'flag' gamma support to png_set_gamma. Made a minor change from the previous (unreleased) ABI/API to hide the exact value used for Macs - it's not a good idea to embed this in the ABI! Moved macro definitions for PNG_HAVE_IHDR, PNG_HAVE_PLTE, and PNG_AFTER_IDAT from pngpriv.h to png.h because they must be visible to applications that call png_set_unknown_chunks(). Check for up->location !PNG_AFTER_IDAT when writing unknown chunks before IDAT. Improved "pngvalid --speed" to exclude more of pngvalid from the time. Documented png_set_alpha_mode(), other changes in libpng.3/libpng-manual.txt The cHRM chunk now sets the defaults for png_set_rgb_to_gray() (when negative parameters are supplied by the caller), while in the absence of cHRM sRGB/Rec 709 values are still used. The bKGD chunk no longer overwrites the background value set by png_set_background(), allowing the latter to be used before the file header is read. It never performed any useful function to override the default anyway. Added memory overwrite and palette image checks to pngvalid.c Previously palette image code was poorly checked. Since the transformation code has a special palette path in most cases this was a severe weakness. Minor cleanup and some extra checking in pngrutil.c and pngrtran.c. When expanding an indexed image, always expand to RGBA if transparency is present. Reversed earlier 1.5.3 change of transformation order; move png_expand_16 back where it was. The change doesn't work because it requires 16-bit gamma tables when the code only generates 8-bit ones. This fails silently; the libpng code just doesn't do any gamma correction. Moving the tests back leaves the old, inaccurate, 8-bit gamma calculations, but these are clearly better than none! png_set_background() and png_expand_16() did not work together correctly. This problem is present in 1.5.2; if png_set_background is called with need_expand false and the matching 16 bit color libpng erroneously just treats it as an 8-bit color because of where png_do_expand_16 is in the transform list. This simple fix reduces the supplied colour to 8-bits, so it gets smashed, but this is better than the current behavior. Added tests for expand16, more fixes for palette image tests to pngvalid. Corrects the code for palette image tests and disables attempts to validate palette colors. Fixed uninitialized memory read in png_format_buffer() (Bug report by Frank Busse, related to CVE-2004-0421). Fixed png_handle_sCAL which is broken in 1.5; added sCAL to pngtest.png Revised documentation about png_set_user_limits() to say that it also affects png writing. Revised handling of png_set_user_limits() so that it can increase the limit beyond the PNG_USER_WIDTH|HEIGHT_MAX; previously it could only reduce it. Make the 16-to-8 scaling accurate. Dividing by 256 with no rounding is wrong (high by one) 25% of the time. Dividing by 257 with rounding is wrong in 128 out of 65536 cases. Getting the right answer all the time without division is easy. Added "_SUPPORTED" to the PNG_WRITE_CUSTOMIZE_ZTXT_COMPRESSION macro. Added projects/owatcom, an IDE project for OpenWatcom to replace scripts/makefile.watcom. This project works with OpenWatcom 1.9. The IDE autogenerates appropriate makefiles (libpng.mk) for batch processing. The project is configurable, unlike the Visual Studio project, so long as the developer has an awk. Changed png_set_gAMA to limit the gamma value range so that the inverse of the stored value cannot overflow the fixed point representation, and changed other things OpenWatcom warns about. Revised pngvalid.c to test PNG_ALPHA_MODE_SUPPORTED correctly. This allows pngvalid to build when ALPHA_MODE is not supported, which is required if it is to build on libpng 1.4. Removed string/memory macros that are no longer used and are not necessarily fully supportable, particularly png_strncpy and png_snprintf. Added log option to pngvalid.c and attempted to improve gamma messages. People found the presence of a beta release following an rc release to be confusing; therefore we bump the version to libpng-1.5.4beta01 and there will be no libpng-1.5.3 release. Moved definitions of PNG_HAVE_IHDR, PNG_AFTER_IDAT, and PNG_HAVE_PLTE outside of an unknown-chunk block in png.h because they are also needed for other uses. Added png_set_scale_16() API, to match inaccurate results from previous libpng versions, configurable with PNG_READ_SCALE_16_TO_8_SUPPORTED. Fixed a problem in png_do_expand_palette() exposed by optimization in 1.5.3beta06 Also removed a spurious and confusing "trans" member ("trans") from png_info. The palette expand optimization prevented expansion to an intermediate RGBA form if tRNS was present but alpha was marked to be stripped; this exposed a check for tRNS in png_do_expand_palette() which is inconsistent with the code elsewhere in libpng. Added PNG_TRANSFORM_SCALE_16 to the high-level read transforms. If PNG_READ_16_TO_8_ACCURATE_SCALE is not enabled, png_set_scale_16() and png_do_scale_16_to_8() aren't built. Revised contrib/visupng, gregbook, and pngminim to demonstrate scale_16_to_8 Fixed pngvalid, simplified macros, added checking for 0 in sCAL. The ACCURATE scale macro is no longer defined in libpng-1.5 - call the png_scale_16_to_8 API. Made sure that PNG_READ_16_TO_8 is still defined if the png_strip_16_to_8 API is present. png_check_fp_number now maintains some state so that positive, negative and zero values are identified. sCAL uses these to be strictly spec conformant. Define PNG_ALLOCATED to "restrict" only if MSC_VER >= 1400. |
From: Glenn Randers-P. <gl...@gm...> - 2011-04-10 22:34:56
|
Libpng-1.4.7 is available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net Changes since the last public release (1.4.6): Relocated misplaced new declarations in pngwutil.c. Disabled PNG_PEDANTIC_WARNINGS for all MSC versions as in libpng-1.4.5. Libpng-1.4.6 would not build on some platforms. I suspect that libpng-1.5.3beta02 may exhibit the same failure some MSC versions (when not using the visualc71 project, which defines PNG_NO_PEDANTIC_WARNINGS). Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2011-04-09 02:28:46
|
libpng-1.4.6 doesn't compile on all systems due to some misplaced declarations in pngwutil.c Please wait for libpng-1.4.7 Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2011-04-08 17:10:12
|
libpng-1.4.6 is available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net There are no changes from libpng-1.4.6beta02. Changes since the last public release (1.4.5): Fixed bug in background transformation handling in pngrtran.c (it was looking for the flag in png_ptr->transformations instead of in png_ptr->flags) (David Raymond). Fixed misspelled macros in contrib/pngminim (Cosmin) Updated CMakeLists.txt (Clifford Yapp) Fixed some typecasts in png_debug statements (Cosmin). Updated documentation of png_set|get_tRNS() (Thomas Klausner). Added png_const_structp and png_const_infop types, and used them in prototypes for most png_get_*() functions. In the manual, describe the png_get_IHDR() arguments in the correct order. Updated the synopses in the manual to reflect recent changes. Fixed a typo in the *.def files and deleted entries that are now declared in pngpriv.h Updated contrib/pngsuite/README to add the word "modify". Added the private PNG_UNUSED() macro definition in pngconf.h. ifdef out mask arrays in pngread.c when interlacing is not supported. Added attribute definition (warnings) for MSC_VER >= 1300 in pngconf.h Added -D_CRT_SECURE_NO_DEPRECATE to CFLAGS in makefile.vcwin32 Fixed mistake in the descriptions of user read_transform and write_transform function prototypes in the manual. The row_info struct is png_row_infop. Added a request in the manual that applications do not use "png_" or "PNG_" to begin any of their own symbols. Fixed incorrect examples of callback prototypes in the manual, that were introduced in libpng-1.0.0. Removed "strip" from contrib/pngminim/*/makefile. Fixed a bug (present since libpng-1.0.7) that makes png_handle_sPLT() fail to compile when PNG_NO_POINTER_INDEXING is defined (Chubanov Kirill) Improved the optimization of the zlib CMF byte (see libpng-1.2.6beta03). This is expected to be the last release of 1.4.x unless a security release becomes necessary. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2011-03-31 16:41:17
|
Libpng-1.5.2 is available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net Changes since the last public release (1.5.1): More -Wshadow fixes for older gcc compilers. Older gcc versions apparently check formal parameters names in function declarations (as well as definitions) to see if they match a name in the global namespace. Revised PNG_EXPORTA macro to not use an empty parameter, to accommodate the old VisualC++ preprocessor. Turned on interlace handling in png_read_png(). Fixed gcc pendantic warnings. Handle longjmp in Cygwin. Fixed png_get_current_row_number() in the interlaced case. Cleaned up ALPHA flags and transformations. Implemented expansion to 16 bits. Fixed mistake in the descriptions of user read_transform and write_transform function prototypes in the manual. The row_info struct is png_row_infop. Corrected png_get_current_row_number documentation Fixed the read/write row callback documentation. This documents the current behavior, where the callback is called after every row with information pertaining to the next row. Fixed scripts/makefile.vcwin32 Updated contrib/pngsuite/README to add the word "modify". Define PNG_ALLOCATED and other attributes to blank when _MSC_VER<1300. ifdef out mask arrays in pngread.c when interlacing is not supported. Added a hint to try CPP=/bin/cpp if "cpp -E" fails in scripts/pnglibconf.mak and in contrib/pngminim/*/makefile, eg., on SunOS 5.10, and removed "strip" from the makefiles. Fixed a bug (present since libpng-1.0.7) that makes png_handle_sPLT() fail to compile when PNG_NO_POINTER_INDEXING is defined (Chubanov Kirill) Don't include standard header files in png.h while building the symbol table, to avoid cpp failure on SunOS (introduced PNG_BUILDING_SYMBOL_TABLE macro). |
From: Glenn Randers-P. <gl...@gm...> - 2011-02-03 05:12:11
|
libpng-1.5.1 is available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net Changes since the last public release (1.5.0): Added description of png_set_crc_action() to the manual. Added a note in the manual that the type of the iCCP profile was changed from png_charpp to png_bytepp in png_get_iCCP(). Similarly, it was changed from png_charpp to png_const_bytepp in png_set_iCCP(). Ensure that png_rgb_to_gray ignores palette mapped images, if libpng internally happens to call it with one. Fixed the failure to handle palette mapped images correctly. Fixed a bug in handling of interlaced images (bero at arklinux.org). Updated CMakeLists.txt (Clifford Yapp) Fixed typecasting of some png_debug() statements (Cosmin) Updated documentation of png_set|get_tRNS() (Thomas Klausner). Mentioned in the documentation that applications must #include "zlib.h" if they need access to anything in zlib.h, and that a number of macros such as png_memset() are no longer accessible by applications. Corrected pngvalid gamma test "sample" function to access all of the color samples of each pixel, instead of sampling the red channel three times. Changed variable names index, div, exp, and gamma to char_index, divisor, exp_b10, and gamma_val, respectively, to avoid "shadow" warnings. Prevent png_push_crc_skip() from hanging while reading an unknown chunk or an over-large compressed zTXt chunk with the progressive reader. Eliminated more GCC "shadow" warnings. Revised png_fixed() in png.c to avoid compiler warning about reaching the end without returning anything. In the manual, describe the png_get_IHDR() arguments in the correct order. Added const_png_structp and const_png_infop types, and used them in prototypes for most png_get_*() functions. Added png_get_io_chunk_type() and deprecated png_get_io_chunk_name() Added synopses for the IO_STATE functions and other missing synopses to the manual. Removed the synopses from libpngpf.3 because they were out of date and no longer useful. Better information can be obtained by reading the prototypes and comments in pngpriv.h Attempted to fix cpp on Solaris with S. Studio 12 cc, fix build Added a make macro DFNCPP that is a CPP that will accept the tokens in a .dfn file and adds configure stuff to test for such a CPP. ./configure should fail if one is not available. Corrected const_png_ in png.h to png_const_ to avoid polluting the namespace. Added png_get_current_row_number and png_get_current_pass_number for the benefit of the user transform callback. Added png_process_data_pause and png_process_data_skip for the benefit of progressive readers that need to stop data processing or want to optimize skipping of unread data (e.g. if the reader marks a chunk to be skipped.) Enhanced pngvalid, corrected an error in gray_to_rgb, corrected doc error. pngvalid contains tests of transforms, which tests are currently disabled because they are incompletely tested. gray_to_rgb was failing to expand the bit depth for smaller bit depth images; this seems to be a long standing error and resulted, apparently, in invalid output. The documentation did not accurately describe what libpng really does when converting RGB to gray. Fixed incorrect examples of callback prototypes in the manual, that were introduced in libpng-1.0.0. In addition the order of the png_get_uint macros with respect to the relevant function definitions has been reversed. This helps the preprocessing of the symbol files be more robust. Furthermore, the symbol file preprocessing now uses -DPNG_NO_USE_READ_MACROS even when the library may actually be built with PNG_USE_READ_MACROS; this stops the read macros interfering with the symbol file format. Made the manual, synopses, and function prototypes use the function argument names file_gamma, int_file_gamma, and srgb_intent consistently. Changed PNG_UNUSED from "param=param;" to "(void)param;". Added transform tests to pngvalid and simplified the arguments. Added a request in the manual that applications do not use "png_" or "PNG_" to begin any of their own symbols. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2011-01-06 13:36:33
|
libpng-1.5.0 is available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net There are no changes from libpng-1.5.0rc07, except for fixing a couple of tiny typos in the manual. Read the ANNOUNCE file and the section on libpng-1.4 to 1.5 differences in libpng-manual.txt that come with libpng to see the differences from 1.4.5. The major changes include moving the png and png_info structs into their own private header files, and provision of a new, more thorough test program (pngvalid.c), and an awk-based system of maintaining the new pnglibconf.h file that keeps track of how libpng was configured (i.e., what features were supported when libpng was built). Most of this work was done by John Bowler. Except for the accessibility of the png and png_info structs (which we have been deprecating for more than a decade), the API isn't significantly changed. Applications built with libpng14 without compiler warnings about using deprecated features should also build without modification with libpng15. Please reply to the png-mng-implement list. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2010-12-09 13:59:58
|
libpng-1.4.5 is available from the usual sources: ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net Changes since the last public release (1.4.4): Fixed possible configure.ac bug introduced in version 1.4.4. Wrapped long lines in CMakeLists.txt and introduced ${libpng_public_hdrs} Check for out-of-range text compression mode in png_set_text(). Removed some extraneous parentheses that appeared in pngrutil.c of libpng-1.4.3 Revised png_get_uint_32, png_get_int_32, png_get_uint_16 (Cosmin) Moved reading of file signature into png_read_sig (Cosmin) Fixed atomicity of chunk header serialization (Cosmin) Added test for io_state in pngtest.c (Cosmin) Added "#!/bin/sh" at the top of contrib/pngminim/*/gather.sh scripts. Changes to remove gcc warnings (John Bowler) Certain optional gcc warning flags resulted in warnings in libpng code. With these changes only -Wconversion and -Wcast-qual cannot be turned on. Changes are trivial rearrangements of code. -Wconversion is not possible for pngrutil.c (because of the widespread use of += et al on variables smaller than (int) or (unsigned int)) and -Wcast-qual is not possible with pngwio.c and pngwutil.c because the 'write' callback and zlib compression both fail to declare their input buffers with 'const'. Added comment about the potential API incompatibility of the png_get_uint_16() macro with libpng-1.4.0 through 1.4.4. Removed PNG_NO_WRITE_GAMMA from pngminim/encoder/pngusr.h Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2010-09-23 12:51:36
|
libpng-1.4.4 is available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net/index.html This is mostly a cleanup release. There is little of significance changed in the *.c and *.h files: Changes since the last public release (1.4.3): Removed extraneous new_push_process_row.c file. Revised the "SEE ALSO" style of libpng.3, libpngpf.3, and png.5 Removed some newly-added TAB characters from pngpread.c. Fixed some indentation in pngpread.c and pngrutil.c Changed "extern PNG_EXPORT" to "PNG_EXPORT" in png.h (Jan Nijtmans) Changed "extern" to "PNG_EXTERN" in pngpriv.h (except for the 'extern "C" {') Put "#ifndef PNG_EXTERN, #endif" around "#define PNG_EXTERN" in pngpriv.h Added -DNO_PNG_SNPRINTF to CFLAGS in scripts/makefile.dj2 Moved the definition of png_snprintf() outside of the enclosing #ifdef blocks in pngconf.h Made a special case "#define PNGAPI" in pngconf.h for WATCOM. Removed reference to cbuilder5/* from Makefile.in and Makefile.am Updated the read macros and functions from 1.5.0beta38. Updated projects/visualc71 so it can find scripts/pnglibconf.h Removed unused png_mem_* defines from pngconf.h. Correct use of _WINDOWS_ in pngconf.h Don't try to use version-script with cygwin/mingw. Revised contrib/gregbook to work under cygwin/mingw. Add .dll.a to the list of extensions to be symlinked by Makefile.am (Yaakov) Updated CMakelists.txt to use CMAKE_INSTALL_LIBDIR variable; useful for installing libpng in /usr/lib64 (Funda Wang). Revised CMakeLists.txt to put the man pages in share/man/man* not man/man* Revised CMakeLists.txt to make symlinks instead of copies when installing. Moved "#include pngusr.h" ahead of PNG_USER_PRIVATEBUILD test in pngconf.h Eliminated a deprecated reference to png_ptr->io_ptr in pngtest.c Eliminated new unnecessary #if tests regarding the sCAL chunk from pngrutil.c Updated the xcode project to work with libpng-1.4.x and added iOS targets for simulator and device (Philippe Hausler). Revised autogen.sh to recognize and use $AUTOCONF, $AUTOMAKE, $AUTOHEADER, $AUTOPOINT, $ACLOCAL and $LIBTOOLIZE Rebuilt configure scripts with automake-1.11.1 instead of automake-1.11. Removed unused mkinstalldirs file. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2010-06-26 01:02:32
|
libpng-1.4.3 and 1.2.44 are available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net and libpng-1.5.0beta31 is available from ftp://ftp/simplesystems.org/pub/png-group/src Changes include Added missing quotation marks in the aix block of configure.ac The new "vstudio" project was missing from the zip and 7z distributions. Rewrote png_process_IDAT_data to consistently treat extra data as warnings and handle end conditions more cleanly. Removed the now-redundant check for out-of-bounds new_row from example.c Changed char *msg to PNG_CONST char *msg in pngrutil.c Stop memory leak when reading a malformed sCAL chunk. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2010-02-25 14:34:40
|
libpng-1.4.1 and libpng-1.2.43 are available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net Changes from 1.4.0 to 1.4.1: Updated CMakeLists.txt for consistent indentation and to avoid an unclosed if-statement warning (Philip Lowman). Revised Makefile.am and Makefile.in to remove references to Y2KINFO, KNOWNBUG, and libpng.la (Robert Schwebel). Revised the makefiles to install the same files and symbolic except for libpng.la and libpng14.la. Make png_set|get_compression_buffer_size() available even when PNG_WRITE_SUPPORTED is not enabled. Revised Makefile.am and Makefile.in to simplify their maintenance. Revised the makefiles to install a link to libpng14.so.14.1 Removed png_set_premultiply_alpha() from scripts/*.def Revised png_decompress_chunk() to improve speed and memory usage when decoding large chunks, using a two-pass method suggested by John Bowler. Added png_set|get_chunk_malloc_max() functions. Relocated "int k" declaration in pngtest.c to minimize its scope. Folded some long lines in the source files. Added defineable PNG_USER_CHUNK_CACHE_MAX and PNG_USER_CHUNK_MALLOC_MAX Eliminated use of png_ptr->irowbytes and reused the slot in png_ptr as png_ptr->png_user_chunk_malloc_max. Return allocated "old_buffer" in png_push_save_buffer() before calling png_error(), to avoid a potential memory leak. Removed the cbuilder5 project, which has not been updated to 1.4.0. Complete rewrite of two-pass png_decompress_chunk() by John Bowler. Removed obsolete unused MMX-querying support from contrib/gregbook Removed the AIX redefinition of jmpbuf in png.h Define _ALL_SOURCE in configure.ac, makefile.aix, and CMakeLists.txt when using AIX compiler. Removed unused gzio.c from contrib/pngminim gather and makefile scripts Changes from 1.2.42 to 1.2.43: Updated CMakeLists.txt for consistent indentation and to avoid an unclosed if-statement warning (Philip Lowman). Removed "#ifdef PNG_1_0_X / #endif" surrounding PNG_READ_16_TO_8_SUPPORTED and PNG_READ_GRAY_TO_RGB_SUPPORTED in pngconf.h. These were added in libpng-1.2.41beta08 and libpng-1.0.51, which introduced a binary incompatibility with libpng-1.0.50. Backported two-pass png_decompress_chunk() algorithm from libpng-1.4.1 Removed PNGAPI declaration of png_calloc() and png_write_sig() in 1ibpng-1.2.X, introduced by mistake in libpng-1.2.41. Return allocated "old_buffer" in png_push_save_buffer() before png_error(), to avoid a potential memory leak. Ported rewritten png_decompress_chunk() by John Bowler from libpng-1.4.1. Define _ALL_SOURCE in configure.ac, makefile.aix, and CMakeLists.txt when using AIX compiler. Removed unused gzio.c from contrib/pngminim gather and makefile scripts For legacy applications that were linked with libpng-1.0.x, libpng-1.0.53 is also available, with changes similar to those in 1.2.43. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2010-02-25 14:18:22
|
version 1.4.1 [%DATE%] Updated CMakeLists.txt for consistent indentation and to avoid an unclosed if-statement warning (Philip Lowman). libpng-1.4.1 and libpng-1.2.43 are available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net Changes from 1.4.0 to 1.4.1: Revised Makefile.am and Makefile.in to remove references to Y2KINFO, KNOWNBUG, and libpng.la (Robert Schwebel). Revised the makefiles to install the same files and symbolic except for libpng.la and libpng14.la. Make png_set|get_compression_buffer_size() available even when PNG_WRITE_SUPPORTED is not enabled. Revised Makefile.am and Makefile.in to simplify their maintenance. Revised the makefiles to install a link to libpng14.so.14.1 Removed png_set_premultiply_alpha() from scripts/*.def Revised png_decompress_chunk() to improve speed and memory usage when decoding large chunks, using a two-pass method suggested by John Bowler. Added png_set|get_chunk_malloc_max() functions. Relocated "int k" declaration in pngtest.c to minimize its scope. Folded some long lines in the source files. Added defineable PNG_USER_CHUNK_CACHE_MAX and PNG_USER_CHUNK_MALLOC_MAX Eliminated use of png_ptr->irowbytes and reused the slot in png_ptr as png_ptr->png_user_chunk_malloc_max. Return allocated "old_buffer" in png_push_save_buffer() before calling png_error(), to avoid a potential memory leak. Removed the cbuilder5 project, which has not been updated to 1.4.0. Complete rewrite of two-pass png_decompress_chunk() by John Bowler. Removed obsolete unused MMX-querying support from contrib/gregbook Removed the AIX redefinition of jmpbuf in png.h Define _ALL_SOURCE in configure.ac, makefile.aix, and CMakeLists.txt when using AIX compiler. Removed unused gzio.c from contrib/pngminim gather and makefile scripts Changes from 1.2.42 to 1.2.43: Updated CMakeLists.txt for consistent indentation and to avoid an unclosed if-statement warning (Philip Lowman). Removed "#ifdef PNG_1_0_X / #endif" surrounding PNG_READ_16_TO_8_SUPPORTED and PNG_READ_GRAY_TO_RGB_SUPPORTED in pngconf.h. These were added in libpng-1.2.41beta08 and libpng-1.0.51, which introduced a binary incompatibility with libpng-1.0.50. Backported two-pass png_decompress_chunk() algorithm from libpng-1.4.1 Removed PNGAPI declaration of png_calloc() and png_write_sig() in 1ibpng-1.2.X, introduced by mistake in libpng-1.2.41. Return allocated "old_buffer" in png_push_save_buffer() before png_error(), to avoid a potential memory leak. Ported rewritten png_decompress_chunk() by John Bowler from libpng-1.4.1. Define _ALL_SOURCE in configure.ac, makefile.aix, and CMakeLists.txt when using AIX compiler. Removed unused gzio.c from contrib/pngminim gather and makefile scripts For legacy applications that were linked with libpng-1.0.x, libpng-1.0.53 is also available, with changes similar to those in 1.2.43. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2010-01-03 13:27:34
|
On Sun, Jan 3, 2010 at 12:38 AM, Glenn Randers-Pehrson <gl...@gm...> wrote: > Changes to Libpng from version 1.2.42 to 1.4.0, January 3, 2010 The configure script and most of the makefiles will build libpng10 (libpng-1.0.52, provided for legacy 1.0.x applications) libpng12 (libpng-1.2.42, provided for recent legacy 1.2.x apps) libpng14 (libpng-1.4.0, the current stable version) libpng (whichever of the above was built last!) You should build them in order 1) libpng10 (if you must; you probably don't need libpng10) 2) libpng12 3) libpng14 If you simply want the latest version, use -lpng -lz when building your application. If you need a specific version, use, e.g., -lpng12 -lz. Most applications can probably simply use -lpng -lz. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2010-01-03 05:38:38
|
Changes to Libpng from version 1.2.42 to 1.4.0, January 3, 2010 Libpng-1.4.0 was released by the PNG Development Group on January 3, 2010. Important new features include support for the iTXt chunk and a function for limiting the amount of memory that a possibly malicious compressed chunk can consume. Some long-deprecated functions and features have been removed. A new private header file that is not visible to applications has been created, to improve our ability to maintain binary compatibility among future libpng versions. Specifically, 1. Private libpng prototypes and macro definitions were moved from png.h and pngconf.h into a new pngpriv.h header file that is not visible to applications. 2. Some obsolete/deprecated macros and functions have been removed. a. We eliminated the obsolete, unused pnggccrd.c and pngvcrd.c files and related makefiles. b. We removed the typecasted NULL definitions such as #define png_voidp_NULL (png_voidp)NULL If you used these in your application, just use NULL instead. c. We eliminated the PNG_1_0_X and PNG_1_2_X macros. d. We eliminated the PNG_LEGACY_SUPPORTED macro. e. We removed many WIN32_WCE #ifdefs. f. We removed the functions png_read_init(info_ptr), png_write_init(info_ptr), png_info_init(info_ptr), png_read_destroy(), and png_write_destroy(). They have been deprecated since libpng-0.95. g. We removed the png_permit_empty_plte() function. It has been deprecated since libpng-1.0.9. Use png_permit_mng_features() instead. h. We removed the obsolete stub functions png_get_mmx_flagmask(), png_set_mmx_thresholds(), png_get_asm_flags(), png_get_mmx_bitdepth_threshold(), png_get_mmx_rowbytes_threshold(), png_set_asm_flags(), and png_mmx_supported() i. We removed the obsolete png_check_sig(), png_memcpy_check(), and png_memset_check() functions. Instead use !png_sig_cmp(), png_memcpy(), and png_memset(), respectively, i.e., replace png_check_sig(buf, 8) with png_sig_cmp(buf, 0, 8) == 0 replace png_memcpy_check(png_ptr, dest, src, length) with png_memcpy(dest, src, length) and replace png_memset_check(png_ptr, dest, value, length) with png_memset(dest, value, length) j. We removed support for global arrays to improve thread safety. k. We removed support for numbered error messages by default, since we never got around to actually numbering the error messages. The function png_set_strip_error_numbers() was removed from the library by default. l. The png_zalloc() and png_zfree() functions are no longer exported. The png_zalloc() function no longer zeroes out the memory that it allocates. m. The function png_set_gray_1_2_4_to_8() was removed. It has been deprecated since libpng-1.0.18 and 1.2.9, when it was replaced with png_set_expand_gray_1_2_4_to_8() because the former function also expanded palette images. 3. Several function prototypes were changed. a. We changed the prototype for png_malloc() from png_malloc(png_structp png_ptr, png_uint_32 size) to png_malloc(png_structp png_ptr, png_alloc_size_t size) b. We changed the prototypes of png_get_compression_buffer_size() and png_set_compression_buffer_size() to work with png_size_t instead of png_uint_32. 4. We added some new features: a. We enabled iTXt chunk support by default. This changes the png_text structure by adding the itxt_length, lang, and lang_key members. b. We added the functions png_set_benign_errors(), png_benign_error(), and png_chunk_benign_error(). With these, you can choose to treat certain normally fatal errors as nonfatal. c. Support for setting the maximum amount of memory that the application will allocate for reading chunks was added, as a security measure. The functions png_set_chunk_cache_max() and png_get_chunk_cache_max() were added to the library. d. We added the png_calloc() function and used it in place of of "png_malloc(); png_memset();" except in the case in png_read_png() where the array consists of pointers; in this case a "for" loop is used after the png_malloc() to set the pointers to NULL, to give robust. behavior in case the application runs out of memory part-way through the process. e. We implemented support for I/O states by adding png_ptr member io_state and functions png_get_io_chunk_name() and png_get_io_state() in pngget.c f. We added PNG_TRANSFORM_GRAY_TO_RGB to the available high-level input transforms. 5. Other changes a. We changed the names of the png_struct and info_struct members "trans" and "trans_values" to "trans_alpha" and "trans_color", respectively. b. Checking for and reporting of errors in the IHDR chunk is more thorough. c. We removed the trailing '.' from the warning and error messages. Send comments to png-mng-implement at lists.sf.net (subscription required; visit https://lists.sourceforge.net/lists/listinfo/png-mng-implement to subscribe) or to glennrp at users.sourceforge.net |
From: Glenn Randers-P. <gl...@gm...> - 2009-12-03 11:59:10
|
libpng-1.2.41 (and 1.0.51 for legacy applications) is available at ftp://ftp.simplesystems.org/pub/png/src and at http://libpng.sf.net/index.html Please direct any replies to png...@li... The changes since 1.2.40: Moved redundant IHDR checking into new png_check_IHDR() in png.c and report all errors found in the IHDR data. Eliminated useless call to png_check_cHRM() from pngset.c Expanded TAB characters in pngrtran.c Added "xcode" project similar one already in libpng-1.4.0beta (Alam Arias). Eliminated a shadowed declaration of "pp" in png_handle_sPLT(). Revised pngconf.h to make it easier to enable iTXt support. From libpng version 1.2.9 through 1.2.40, defining PNG_iTXt_SUPPORTED did not work as expected. Converted all PNG_NO_* tests to PNG_*_SUPPORTED everywhere except pngconf.h Changed many "#if defined(x)" to "#ifdef x" and fixed some indentation. Added png_calloc() as a non-exported function. Relocated png_do_chop() ahead of building gamma tables in pngrtran.c This avoids building 16-bit gamma tables unnecessarily. Removed a harmless extra png_set_invert_alpha() from pngwrite.c Bugfixes and improvements to CMakeLists.txt (Philip Lowman) Moved CMakeLists.txt from scripts into the main libpng directory. Patched ltmain.sh for wince support. Added PNG_CONVERT_tIME_SUPPORTED macro. Make inclusion of time.h in pngconf.h depend on PNG_CONVERT_tIME_SUPPORTED Updated scripts/pngw32.def and projects/wince/png32ce.def Copied projects/wince/png32ce.def to the scripts directory. Added scripts/makefile.cegcc Added PNG_DEPSTRUCT, PNG_DEPRECATED, PNG_USE_RESULT, PNG_NORETURN, and PNG_ALLOCATED macros to detect deprecated direct access to the png_struct or info_struct members and other deprecated usage in applications (John Bowler). Removed three direct references to read_info_ptr members in pngtest.c that were detected by the new PNG_DEPSTRUCT macro. Marked deprecated function prototypes with PNG_DEPRECATED. Marked memory allocation function prototypes with PNG_ALLOCATED. Changed png_check_sig() to !png_sig_cmp() in contrib programs. Corrected the png_get_IHDR() call in contrib/gregbook/readpng2.c Marked nonexported functions with PNG_PRIVATE macro. Revised scripts/*.def to reflect functions actually exported by libpng. Updated the copyright year in scripts/pngw32.rc from 2004 to 2009. Moved descriptions of makefiles and other scripts out of INSTALL into scripts/README.txt Rebuilt the configure scripts with autoconf-2.65 Disabled the new pedantic warnings about deprecated function use and deprecated structure access unless the user defines PNG_PEDANTIC_WARNINGS. Added "#define PNG_NO_PEDANTIC_WARNINGS" in the libpng source files. Updated the list of files and made some cosmetic changes in README. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2009-09-10 14:17:07
|
libpng-1.2.40 and libpng-1.0.49 are available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sourceforge.net/index.html This is a minor code cleanup/bugfix version. Changes from libpng-1.2.39 are: Removed an extra png_debug() recently added to png_write_find_filter(). Fixed incorrect #ifdef in pngset.c regarding unknown chunk support. Various bugfixes and improvements to CMakeLists.txt (Philip Lowman) I intend for this to be the last of the 1.0.x/1.2.x series, with only security fixes from now on. Look for a 1.4.0 release in the near future. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2009-08-13 11:33:43
|
libpng-1.2.39 (and libpng-1.0.48) is available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sourceforge.net/index.html Changes from libpng-1.2.38 include: Added a prototype for png_64bit_product() in png.h Rebuilt configure scripts with autoconf-2.64. Avoid a possible NULL dereference in debug build, in png_set_text_2(). Replaced *.tar.lzma with *.tar.xz in distribution. Reject attempt to write iCCP chunk with negative embedded profile length Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2009-07-16 11:56:03
|
libpng-1.0.47 and libpng-1.2.38 are available from ftp://ftp.simplesystems.org/pub/png/src/ and from http://libpng.sourceforge.net/index.html There are no changes from libpng-1.2.38rc03. Since libpng-1.2.37, the license declarations were changed to mention the "libpng license". The configuration files were rebuilt with autoconf-2.63. Some "#ifdef's" were reorganized to separate unknown chunk support from png_set_keep_unknown_chunks() support, because the latter is also useful for ignoring known but unused chunks. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2009-06-04 13:16:05
|
libpng-1.2.37 (and libpng-1.0.45) are available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sourceforge.net/index.html in the "libpng-stable" release package and in the GIT repository "stable" and "master" branches. Fixed bug with new png_memset() of the big_row_buffer. Otherwise the changes are extensive but just cosmetic. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2009-05-28 15:06:34
|
Belated announcement: libpng-1.2.36 is available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net/index.html Libpng-1.2.36 was released on May 7. Libpng-1.2.37 will be out next Thursday June 4. Here are the changes from 1.2.35 to 1.2.36: Revised comments in png_set_read_fn() and png_set_write_fn(). Revised order of #ifdef's and indentation in png_debug definitions of png.h bug introduced in libpng-1.2.34. Use png_memset() after png_malloc() of big_row_buf when reading an interlaced file, to avoid a possible UMR (uninitialized memory read) Undid recent revision of PNG_NO_STDIO version of png_write_flush(). Users having trouble with fflush() can build with PNG_NO_WRITE_FLUSH defined. Revised libpng*.txt documentation about use of png_write_flush(). Removed fflush() from pngtest.c. Added "#define PNG_NO_WRITE_FLUSH" to contrib/pngminim/encoder/pngusr.h Relocated misplaced PNG_1_0_X define in png.h that caused the prototype for png_set_strip_error_numbers() to be omitted from PNG_NO_ASSEMBLER_CODE builds. This bug was introduced in libpng-1.2.15beta4. Added a section on differences between 1.0.x and 1.2.x to libpng.3/libpng.txt Fixed potential memory leak of "new_name" in png_write_iCCP() (Ralph Giles) Added "ifndef PNG_SKIP_SETJMP_CHECK" block in pngconf.h to allow application code writers to bypass the check for multiple inclusion of setjmp.h when they know that it is safe to ignore the situation. Made some cosmetic changes to whitespace in pngtest output. Renamed "user_chunk_data" to "my_user_chunk_data" in pngtest.c to suppress "shadowed declaration" warning from gcc-4.3.3. Renamed "gamma" to "png_gamma" in pngset.c to avoid "shadowed declaration" warning about a global "gamma" variable in math.h on some platforms. |
From: Glenn Randers-P. <gl...@gm...> - 2009-04-01 11:43:50
|
A "git" repository has been established for libpng. You can browse the repository at libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng You can obtain git access at git://libpng.git.sourceforge.net/gitroot/libpng Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2009-02-19 01:26:29
|
Libpng-1.0.43 and libpng-1.2.35 are available from ftp://ftp.simplesystems.org/pub/png/src and from http://libpng.sf.net These fix a vulnerability reported by Tavis Ormandy in which some arrays of pointers are not initialized prior to using "malloc" to define the pointers. If the application runs out of memory, then libpng's cleanup process will try to free all of the pointers in the array, some of which are not initialized. For more details, and a patch for older libpng versions, see libpng-1.2.34-ADVISORY.txt that is included in the libpng-1.2.35 distribution. Glenn |
From: Glenn Randers-P. <gl...@gm...> - 2008-07-10 22:37:04
|
A call for vote has been issued on png...@li... for the proposed "Screenshot URL" text keyword. |