From: Jakub Bogusz <qboosh@pld-linux.org>
Date: Thu, 9 Jan 2003 15:31:53 +0000 (+0000)
Subject: - fix from Debian for bug in handling of 16-bit depth images
X-Git-Tag: libpng-1_2_5-1
X-Git-Url: http://git.pld-linux.org/?a=commitdiff_plain;h=47015ecf471e2543cae5cca4b68e6a60b63370aa;p=packages%2Fcrossmingw32-libpng.git

- fix from Debian for bug in handling of 16-bit depth images
  that could cause security problems

Changed files:
    libpng-16bit-overflow.patch -> 1.1
---

diff --git a/libpng-16bit-overflow.patch b/libpng-16bit-overflow.patch
new file mode 100644
index 0000000..ed96b20
--- /dev/null
+++ b/libpng-16bit-overflow.patch
@@ -0,0 +1,24 @@
+--- libpng-1.2.5.orig/pngrtran.c
++++ libpng-1.2.5/pngrtran.c
+@@ -1965,8 +1965,8 @@
+          /* This changes the data from RRGGBB to RRGGBBXX */
+          if (flags & PNG_FLAG_FILLER_AFTER)
+          {
+-            png_bytep sp = row + (png_size_t)row_width * 3;
+-            png_bytep dp = sp  + (png_size_t)row_width;
++            png_bytep sp = row + (png_size_t)row_width * 6;
++            png_bytep dp = sp  + (png_size_t)row_width * 2;
+             for (i = 1; i < row_width; i++)
+             {
+                *(--dp) = hi_filler;
+@@ -1987,8 +1987,8 @@
+          /* This changes the data from RRGGBB to XXRRGGBB */
+          else
+          {
+-            png_bytep sp = row + (png_size_t)row_width * 3;
+-            png_bytep dp = sp  + (png_size_t)row_width;
++            png_bytep sp = row + (png_size_t)row_width * 6;
++            png_bytep dp = sp  + (png_size_t)row_width * 2;
+             for (i = 0; i < row_width; i++)
+             {
+                *(--dp) = *(--sp);