update to libpng 1.6.31

1 files changed, 93 insertions, 2 deletions

diff --git a/plugins/AdvaImg/src/LibPNG/CHANGES b/plugins/AdvaImg/src/LibPNG/CHANGES
index 62ab676da4..6447bbb3c6 100644
--- a/plugins/AdvaImg/src/LibPNG/CHANGES
+++ b/plugins/AdvaImg/src/LibPNG/CHANGES
@@ -5761,7 +5761,9 @@ Version 1.6.27beta01 [November 2, 2016]
     if built with zlib-1.2.8.1.

 

 Version 1.6.27rc01 [December 27, 2016]

-  Control ADLER32 checking with new PNG_IGNORE_ADLER32 option.

+  Control ADLER32 checking with new PNG_IGNORE_ADLER32 option. Fixes

+    an endless loop when handling erroneous ADLER32 checksums; bug

+    introduced in libpng-1.6.26.

   Removed the use of a macro containing the pre-processor 'defined'

     operator.  It is unclear whether this is valid; a macro that

     "generates" 'defined' is not permitted, but the use of the word

@@ -5811,12 +5813,101 @@ Version 1.6.29beta02 [February 22, 2017]
 Version 1.6.29beta03 [March 1, 2017]

   Avoid potential overflow of shift operations in png_do_expand() (Aaron Boxer).

   Change test ZLIB_VERNUM >= 0x1281 to ZLIB_VERNUM >= 0x1290 in pngrutil.c

-    because Solaris 11 distributes zlib-1.2.8.f that is older than 1.2.8.1.

+    because Solaris 11 distributes zlib-1.2.8.f that is older than 1.2.8.1,

+    as suggested in zlib FAQ, item 24.

   Suppress clang warnings about implicit sign changes in png.c

 

 Version 1.6.29 [March 16, 2017]

   No changes.

 

+Version 1.6.30beta01 [April 1, 2017]

+  Added missing "$(CPPFLAGS)" to the compile line for c.pic.o in

+    makefile.linux and makefile.solaris-x86 (Cosmin).

+  Revised documentation of png_get_error_ptr() in the libpng manual.

+  Silence clang -Wcomma and const drop warnings (Viktor Szakats).

+  Update Sourceforge URLs in documentation (https instead of http).

+

+Version 1.6.30beta02 [April 22, 2017]

+  Document need to check for integer overflow when allocating a pixel

+    buffer for multiple rows in contrib/gregbook, contrib/pngminus,

+    example.c, and in the manual (suggested by Jaeseung Choi). This

+    is similar to the bug reported against pngquant in CVE-2016-5735.

+  Removed reference to the obsolete PNG_SAFE_LIMITS macro in the documentation.

+

+Version 1.6.30beta03 [May 22, 2017]

+  Check for integer overflow in contrib/visupng and contrib/tools/genpng.

+  Do not double evaluate CMAKE_SYSTEM_PROCESSOR in CMakeLists.txt.

+  Test CMAKE_HOST_WIN32 instead of WIN32 in CMakeLists.txt.

+  Fix some URL in documentation.

+

+Version 1.6.30beta04 [June 7, 2017]

+  Avoid writing an empty IDAT when the last IDAT exactly fills the

+    compression buffer (bug report by Brian Baird). This bug was

+    introduced in libpng-1.6.0.

+

+Version 1.6.30rc01 [June 14, 2017]

+  No changes.

+

+Version 1.6.30rc02 [June 25, 2017]

+  Update copyright year in pnglibconf.h, make ltmain.sh executable.

+  Add a reference to the libpng.download site in README.

+

+Version 1.6.30 [June 28, 2017]

+  No changes.

+

+Version 1.6.31beta01 [July 5, 2017]

+  Guard the definition of _POSIX_SOURCE in pngpriv.h (AIX already defines it;

+    bug report by Michael Felt).

+  Revised pngpriv.h to work around failure to compile arm/filter_neon.S

+    ("typedef" directive is unrecognized by the assembler). The problem

+    was introduced in libpng-1.6.30beta01.

+  Added "Requires: zlib" to libpng.pc.in (Pieter Neerincx).

+  Added special case for FreeBSD in arm/filter_neon.S (Maya Rashish).

+

+Version 1.6.31beta02 [July 8, 2017]

+  Added instructions for disabling hardware optimizations in INSTALL.

+  Added "--enable-hardware-optimizations" configuration flag to enable

+    or disable all hardware optimizations with one flag.

+

+Version 1.6.31beta03 [July 9, 2017]

+  Updated CMakeLists.txt to add INTEL_SSE and MIPS_MSA platforms.

+  Changed "int" to "png_size_t" in intel/filter_sse2.c to prevent

+    possible integer overflow (Bug report by John Bowler).

+  Quieted "declaration after statement" warnings in intel/filter_sse2.c.

+  Added scripts/makefile-linux-opt, which has hardware optimizations enabled.

+

+Version 1.6.31beta04 [July 11, 2017]

+  Removed one of the GCC-7.1.0 'strict-overflow' warnings that result when

+    integers appear on both sides of a compare.  Worked around the others by

+    forcing the strict-overflow setting in the relevant functions to a level

+    where they are not reported (John Bowler).

+  Changed "FALL THROUGH" comments to "FALLTHROUGH" because GCC doesn't like

+    the space.

+  Worked around some C-style casts from (void*) because g++ 5.4.0 objects

+    to them.

+  Increased the buffer size for 'sprint' to pass the gcc 7.1.0 'sprint

+    overflow' check that is on by default with -Wall -Wextra.

+

+Version 1.6.31beta05 [July 13, 2017]

+  Added eXIf chunk support.

+

+Version 1.6.31beta06 [July 17, 2017]

+  Added a minimal eXIf chunk (with Orientation and FocalLengthIn35mmFilm

+    tags) to pngtest.png.

+

+Version 1.6.31beta07 [July 18, 2017]

+  Revised the eXIf chunk in pngtest.png to fix "Bad IFD1 Directory" warning.

+

+Version 1.6.31rc01 [July 19, 2017]

+  No changes.

+

+Version 1.6.31rc02 [July 25, 2017]

+  Fixed typo in example.c (png_free_image should be png_image_free) (Bug

+    report by John Smith)

+

+Version 1.6.31 [July 27, 2017]

+  No changes.

+

 Send comments/corrections/commendations to png-mng-implement at lists.sf.net

 (subscription required; visit

 https://lists.sourceforge.net/lists/listinfo/png-mng-implement