9ebdb5fd00
I decided to just make a bug-fix update and keep the 1.5.x series because newer versions may also need the zlib update.
62 lines
2.4 KiB
Plaintext
62 lines
2.4 KiB
Plaintext
|
|
Libpng 1.5.28 - December 29, 2016
|
|
|
|
This is a public release of libpng, intended for use in production codes.
|
|
|
|
Files available for download:
|
|
|
|
Source files with LF line endings (for Unix/Linux) and with a
|
|
"configure" script
|
|
|
|
libpng-1.5.28.tar.xz (LZMA-compressed, recommended)
|
|
libpng-1.5.28.tar.gz
|
|
|
|
Source files with CRLF line endings (for Windows), without the
|
|
"configure" script
|
|
|
|
lpng1528.7z (LZMA-compressed, recommended)
|
|
lpng1528.zip
|
|
|
|
Other information:
|
|
|
|
libpng-1.5.28-README.txt
|
|
libpng-1.5.28-LICENSE.txt
|
|
libpng-1.5.28-*.asc (armored detached GPG signatures)
|
|
|
|
Changes since the last public release (1.5.27):
|
|
|
|
Merged with current libpng16 gregbook, pngvalid.c, pngtest.c, pngminim,
|
|
pngminus
|
|
Added "Common linking failures" section to INSTALL.
|
|
Fixed undefined behavior in png_push_save_buffer(). Do not call
|
|
memcpy() with a null source, even if count is zero (Leon Scroggins III).
|
|
Merge contrib/pngminim/*/makefile with libpng-1.6.24
|
|
Minor editing of INSTALL, (whitespace, added copyright line)
|
|
Removed the use of a macro containing the pre-processor 'defined'
|
|
operator. It is unclear whether this is valid; a macro that
|
|
"generates" 'defined' is not permitted, but the use of the word
|
|
"generates" within the C90 standard seems to imply more than simple
|
|
substitution of an expression itself containing a well-formed defined
|
|
operation.
|
|
Previously the pngtrans.c code always resulted in an unsigned arithmetic
|
|
overflow. This is well defined but produces errors from clang with the
|
|
option to detect unsigned overflow. As the expression only gets
|
|
evaluated once per row in this version of libpng it is easier just
|
|
to rewrite it.
|
|
The previous version of png.c produced a signed overflow as a result of
|
|
both the "& 0xffff" on the most significant bits of a negative argument;
|
|
this converted (-1) into 65535 which resulted in a subsequent overflow.
|
|
Since signed overflow is undefined in C90 the code has been modified to
|
|
correctly calculate a signed result. This requires changing the 'hi'
|
|
result parameter to a signed value.
|
|
Fixed a potential null pointer dereference in png_set_text_2() (bug report
|
|
and patch by Patrick Keshishian).
|
|
|
|
Send comments/corrections/commendations to png-mng-implement at lists.sf.net
|
|
(subscription required; visit
|
|
https://lists.sourceforge.net/lists/listinfo/png-mng-implement
|
|
to subscribe)
|
|
or to glennrp at users.sourceforge.net
|
|
|
|
Glenn R-P
|