Release libpng version 1.6.57
fix: Prevent integer overflow in rowbytes computation
fix: Prevent integer overflow in rowbytes computation
fix: Handle getter-to-setter aliasing in append-style chunk setters
chore: Rerun `./autogen.sh --maintainer`
fix: Handle self-referencing pointers in getter-to-setter aliasing
fix: Handle getter-to-setter aliasing in append-style chunk setters
chore: Rerun `./autogen.sh --maintainer`
fix: Handle self-referencing pointers in getter-to-setter aliasing
Bump version to 1.6.57.git
Merge tag 'v1.6.56' into libpng18
Release libpng version 1.6.56
Update the main AUTHORS file
fix: Use the correct parameter name in `png_file_add_chunk`
oss-fuzz: Restrict transformations_fuzzer to transformations
chore(test): Add comments and tidy up test definitions
refactor(test): Avoid undefined pointer arithmetic in pngstest.c
refactor: Avoid undefined behavior (signed int overflow) in negations
chore: Rerun `./autogen.sh --maintainer`
test: Add negative-stride test coverage to pngstest
fix(test): Add missing test and tidy up the test list in Makefile.am
refactor(arm): Replace bit shifts and sizeof with plain expressions
fix(arm): Resolve out-of-bounds read/write in NEON palette expansion
fix: Sync `info_ptr->palette` after in-place transforms
fix: Resolve use-after-free on `png_ptr->palette`
fix: Initialize tail bytes in `trans_alpha` buffers
Add Halil Oktay to AUTHORS
fix: Resolve use-after-free on `png_ptr->trans_alpha`
oss-fuzz: Fix indentation and rephrase comments in the build script
oss-fuzz: Build the nalloc variants only for the fuzzers that use nalloc
oss-fuzz: Rename `_nalloc` to `@nalloc` to match the fuzztests naming
oss-fuzz: Use bash in the nalloc wrapper script
oss-fuzz: Fix API misuse in the readapi fuzzer
oss-fuzz: Fix memory leaks and API misuse in the transformations fuzzer
build: Deprecate the POINTER_INDEXING config option
build: Remove the POINTER_INDEXING config option
Validate shift bit depths in `png_set_shift` to prevent infinite loop
Validate shift bit depths in `png_set_shift` to prevent infinite loop
Add missing NULL pointer checks in four public API functions
Add missing NULL pointer checks in four public API functions
Fix two copy-paste typos in colormap read and sPLT write
Fix two copy-paste typos in colormap read and sPLT write
Fix wrong channel indices in `png_image_read_and_map` RGB_ALPHA path
Fix wrong channel indices in `png_image_read_and_map` RGB_ALPHA path
oss-fuzz: Fix build.sh for/if
Fix typographical errors
Fix typographical errors
refactor: Clean up pointer variable declarations
refactor: Clean up the redundant top-level const qualifiers
Bump version to 1.6.56.git
Merge tag 'v1.6.55' into libpng18
Merge tag 'v1.6.54' into libpng18
Release libpng version 1.6.55
oss-fuzz: Restrict the nalloc build to libfuzzer
chore: Pacify markdownlint
Add .markdownlint.yml, a configuration file for markdownlint
Fix a heap buffer overflow in `png_set_quantize`
Bump version to 1.6.55.git
Release libpng 1.6.54
chore(oss-fuzz): Fix the lint errors
oss-fuzz: Add three targets
oss-fuzz: Replace unicode space with ascii space
oss-fuzz: Disable nalloc with memory sanitizer
refactor: Improve naming clarity in `png_image_write*` and `png_write_*`
fix: Remove incorrect truncation casts from `png_write_image_*`
refactor: Improve naming clarity in the `png_image_read_*` functions
Fix a heap buffer over-read in `png_image_read_direct_scaled`
Update the copyright year
chore: Tidy up whitespace in declarations and definitions
fix: Use `png_voidp` instead of `voidp` in pngread.c and pngwrite.c
Bump version to 1.6.54.git
ci: Update the install section for AppVeyor CI
Merge tag 'v1.6.53' into libpng18
Release libpng version 1.6.53
build: Remove leftover ASM language from CMake `project`
build: Remove leftover ASM language from CMake `project`
oss-fuzz: Use the nalloc fuzz target
riscv: Delete unused helper functions and macros
Update the list of contributing authors
riscv: Fix the RVV build
Update the main AUTHORS file
Refer to CVE-2025-66293 in a comment about a vulnerability fix
Bump version to 1.6.53.git
Merge tag 'v1.6.52' into libpng18
Release libpng version 1.6.52
oss-fuzz: Add allocation failure fuzzing via nalloc
riscv: Reformat the contributor list and update the AUTHORS file
riscv: Fix undefined behavior in `png_read_filter_row_paeth_rvv`
riscv: Improve averaging performance in `png_read_filter_row_avg_rvv`
Finalize the fix for out-of-bounds read in `png_image_read_composite`
Fix an out-of-bounds read in `png_image_read_composite`
Bump version to 1.6.52.git
Merge tag 'v1.6.51' into libpng18
chore: Sync with branch 'develop'
refactor: Clean up remaining uses of deprecated pointer typedefs
Release libpng version 1.6.51
Update the main AUTHORS file
chore: Rerun `./autogen.sh --maintainer`
ci: Update the branch and tag exclusions on AppVeyor CI
chore: Disable automatic charset detection in .editorconfig-checker