- fix from Debian for bug in handling of 16-bit depth images

  that could cause security problems

Changed files:
    libpng-16bit-overflow.patch -> 1.1

diff --git a/libpng-16bit-overflow.patch b/libpng-16bit-overflow.patch
new file mode 100644 (file)
index 0000000..ed96b20
--- /dev/null
+++ b/libpng-16bit-overflow.patch
@@ -0,0 +1,24 @@
+--- libpng-1.2.5.orig/pngrtran.c
++++ libpng-1.2.5/pngrtran.c
+@@ -1965,8 +1965,8 @@
+          /* This changes the data from RRGGBB to RRGGBBXX */
+          if (flags & PNG_FLAG_FILLER_AFTER)
+          {
+-            png_bytep sp = row + (png_size_t)row_width * 3;
+-            png_bytep dp = sp  + (png_size_t)row_width;
++            png_bytep sp = row + (png_size_t)row_width * 6;
++            png_bytep dp = sp  + (png_size_t)row_width * 2;
+             for (i = 1; i < row_width; i++)
+             {
+                *(--dp) = hi_filler;
+@@ -1987,8 +1987,8 @@
+          /* This changes the data from RRGGBB to XXRRGGBB */
+          else
+          {
+-            png_bytep sp = row + (png_size_t)row_width * 3;
+-            png_bytep dp = sp  + (png_size_t)row_width;
++            png_bytep sp = row + (png_size_t)row_width * 6;
++            png_bytep dp = sp  + (png_size_t)row_width * 2;
+             for (i = 0; i < row_width; i++)
+             {
+                *(--dp) = *(--sp);