Comprehensive integer overflow prevention and security hardening
Global-buffer-overflow (OOB read) in GifDrawText8x8
Heap-buffer-overflow (OOB write) in GifDrawText8x8
Heap-buffer-overflow (OOB write) in GifDrawRectangle
heap-buffer-overflow (OOB write) in GifDrawBox
make install does not include the gif2rgb for bin doc man as it used to although the files are built I had to manually add them
make install does not include the gif2rgb for bin doc man as it used to although the files are built I had to manually add them
the patch is very strange. Could you please clarify how is it supposed to be applied? Note: it patches files like vp8/encoder/onyx_if.c
As another data point, in Homebrew we also saw undefined symbols error in 6.1.2 release. This is specific to macOS builds and can be reproduced with a make all in a fresh download of release tarball. Or isolated to specific problem target via make libutil.dylib, e.g. ❯ curl https://downloads.sourceforge.net/project/giflib/giflib-6.x/giflib-6.1.2.tar.gz -sL | tar x ❯ make -C giflib-6.1.2 libutil.dylib cc -std=gnu99 -fPIC -Wall -O2 -c -o qprintf.o qprintf.c cc -std=gnu99 -fPIC -Wall -O2 -c -o getarg.o...
Fix integer overflows, out-of-bounds access, and uninitialized memory
Our build system relies on conan downloading the giflib dependency from https://downloads.sourceforge.net/project/giflib/giflib-5.2.1.tar.gz It seems the file where moved and now the conan https://github.com/conan-io/conan-center-index/blob/29a66c9c0d881651cab2573a4e63ad6e57cddc7f/recipes/giflib/5.2.x/conandata.yml points to the wrong location. Maybe other package managers or other build system might have similar issue. Is there a way to instruct sourceforge that the location was moved and will do...
Thanks, looks good now!
I fixed my release machinery. You'll find giflib-6.1.2 in the giflib-6.x repository on SourceForge.
Ready to ship 6.1.2
Reasy to ship 6.1.2
Amend release instructions for major versions.
Prepare for release.
Avoid potentuial double-free on weird images.
Which "source file" are you referring to? Can you suggest a specific change to fix the problem you're seeing? And what werer you tryong to build? Pleae show me the command sequence,
Which "source file" are you referring to? Can you suggest a specific change to fix the problem you're seeing?
Error on my part, I forgot the SourceForge require me to create target directories by hand when I change major releases. I have done so and will ship a point release very shortly.
missing 6.1.1 tarball
Ready to ship 6.1.1
Need tarball for release
Resotore missind index master.
Add section enders to NEWS to faculitate machine parsing.
Remove a minor obstacle.
Ignore giflib.7
Update the tarball maker, including local.dic.
Remove erroneous spelling exceptions.
Move gif2rgb to obsolete. Warn about withdrawal of CLI tools.
Majer version bump nereds to be reflected in the control file.
giflib 6.1.1: Missing symbol
Ready to ship 6.1.1
Add section enders to NEWS to faculitate machine parsing.
Ready to ship 6.1.1
Remove a minor obstacle.
Ignore giflib.7
Ignore giflib.7
Update the tarball maker, including local.dic.
Remove erroneous spelling exceptions.
Move gif2rgb to obsolete. Warn about ewithdrawal of CLI tools.
Majer version bunmp nereds to be reflected in the controll file.
6.1.1 API change: Explanation in NEWS.
Address #161: detected memory leaks in EGifOpenFileHandle giflib/egif_lib.c
NEWS update.
Address SF bug #162 detected memory leaks in GifMakeSavedImage giflib/gifalloc.c
Address SF bug #165 EGifSpew leaks GifFileOut->SColorMap
Address SF bug #171 ImageMagick required to build giflib...
Hardening fixes for gifsponge.c and gifecho.c.
NEWS update.
Fix SF bug #161 detected memory leaks in EGifOpenFileHandle giflib/egif_lib.c
Address SF bug #162 detected memory leaks in GifMakeSavedImage giflib/gifalloc.c
Address SF bug #165 EGifSpew leaks GifFileOut->SColorMap
Address SF bug #171 ImageMagick required to build giflib...
Two critical issues in libgif
I think you have misunderstood the API documentation. If you can tell me specifically where the kibrary failsvto do what it say it will do, I'll fix it. If you can tell me wghere the documentationis unclear, I'll fix that.
cannot compile under mingw
EGifSpew leaks SavedImages (and more).
This is intended. The design assumed you might want to write once, modify the in-core data, and write again
detected memory leaks in EGifOpenFileHandle giflib/egif_lib.c
Fix pushed.
ABI break (Removal of - inter alia - public symbol GifQuantizeBuffer ) - third party software affected
Fixed.
detected memory leaks in GifMakeSavedImage giflib/gifalloc.c
Fix pushed.
EGifSpew leaks GifFileOut->SColorMap
Improved fix pushed.
Fix pushed.
ImageMagick required to build giflib on non-Darwin Platforms
Incorrect object files in shared libutil on darwin
Fix pushed,
Address SF bug #172 Incorrect object files in shared libutil on darwin
installation of manual pages and html documentation
Fix pushed,
Address SF bug #173 installation of manual pages and html documentation