| Index: third_party/libpng/pngpread.c
|
| ===================================================================
|
| --- third_party/libpng/pngpread.c (revision 7204)
|
| +++ third_party/libpng/pngpread.c (working copy)
|
| @@ -1,7 +1,7 @@
|
|
|
| /* pngpread.c - read a png file in push mode
|
| *
|
| - * Last changed in libpng 1.2.27 [April 29, 2008]
|
| + * Last changed in libpng 1.2.32 [September 18, 2008]
|
| * For conditions of distribution and use, see copyright notice in png.h
|
| * Copyright (c) 1998-2008 Glenn Randers-Pehrson
|
| * (Version 0.96 Copyright (c) 1996, 1997 Andreas Dilger)
|
| @@ -10,7 +10,6 @@
|
|
|
| #define PNG_INTERNAL
|
| #include "png.h"
|
| -
|
| #ifdef PNG_PROGRESSIVE_READ_SUPPORTED
|
|
|
| /* push model modes */
|
| @@ -28,7 +27,7 @@
|
| png_process_data(png_structp png_ptr, png_infop info_ptr,
|
| png_bytep buffer, png_size_t buffer_size)
|
| {
|
| - if(png_ptr == NULL || info_ptr == NULL) return;
|
| + if (png_ptr == NULL || info_ptr == NULL) return;
|
| png_push_restore_buffer(png_ptr, buffer, buffer_size);
|
|
|
| while (png_ptr->buffer_size)
|
| @@ -43,7 +42,7 @@
|
| void /* PRIVATE */
|
| png_process_some_data(png_structp png_ptr, png_infop info_ptr)
|
| {
|
| - if(png_ptr == NULL) return;
|
| + if (png_ptr == NULL) return;
|
| switch (png_ptr->process_mode)
|
| {
|
| case PNG_READ_SIG_MODE:
|
| @@ -114,7 +113,7 @@
|
|
|
| png_push_fill_buffer(png_ptr, &(info_ptr->signature[num_checked]),
|
| num_to_check);
|
| - png_ptr->sig_bytes = (png_byte)(png_ptr->sig_bytes+num_to_check);
|
| + png_ptr->sig_bytes = (png_byte)(png_ptr->sig_bytes + num_to_check);
|
|
|
| if (png_sig_cmp(info_ptr->signature, num_checked, num_to_check))
|
| {
|
| @@ -210,22 +209,23 @@
|
| }
|
|
|
| png_push_fill_buffer(png_ptr, chunk_length, 4);
|
| - png_ptr->push_length = png_get_uint_31(png_ptr,chunk_length);
|
| + png_ptr->push_length = png_get_uint_31(png_ptr, chunk_length);
|
| png_reset_crc(png_ptr);
|
| png_crc_read(png_ptr, png_ptr->chunk_name, 4);
|
| + png_check_chunk_name(png_ptr, png_ptr->chunk_name);
|
| png_ptr->mode |= PNG_HAVE_CHUNK_HEADER;
|
| }
|
|
|
| if (!png_memcmp(png_ptr->chunk_name, png_IDAT, 4))
|
| - if(png_ptr->mode & PNG_AFTER_IDAT)
|
| + if (png_ptr->mode & PNG_AFTER_IDAT)
|
| png_ptr->mode |= PNG_HAVE_CHUNK_AFTER_IDAT;
|
|
|
| if (!png_memcmp(png_ptr->chunk_name, png_IHDR, 4))
|
| {
|
| + if (png_ptr->push_length != 13)
|
| + png_error(png_ptr, "Invalid IHDR length");
|
| if (png_ptr->push_length + 4 > png_ptr->buffer_size)
|
| {
|
| - if (png_ptr->push_length != 13)
|
| - png_error(png_ptr, "Invalid IHDR length");
|
| png_push_save_buffer(png_ptr);
|
| return;
|
| }
|
| @@ -565,7 +565,7 @@
|
| {
|
| png_bytep ptr;
|
|
|
| - if(png_ptr == NULL) return;
|
| + if (png_ptr == NULL) return;
|
| ptr = buffer;
|
| if (png_ptr->save_buffer_size)
|
| {
|
| @@ -606,7 +606,7 @@
|
| {
|
| if (png_ptr->save_buffer_ptr != png_ptr->save_buffer)
|
| {
|
| - png_size_t i,istop;
|
| + png_size_t i, istop;
|
| png_bytep sp;
|
| png_bytep dp;
|
|
|
| @@ -675,7 +675,7 @@
|
| }
|
|
|
| png_push_fill_buffer(png_ptr, chunk_length, 4);
|
| - png_ptr->push_length = png_get_uint_31(png_ptr,chunk_length);
|
| + png_ptr->push_length = png_get_uint_31(png_ptr, chunk_length);
|
| png_reset_crc(png_ptr);
|
| png_crc_read(png_ptr, png_ptr->chunk_name, 4);
|
| png_ptr->mode |= PNG_HAVE_CHUNK_HEADER;
|
| @@ -698,7 +698,7 @@
|
| {
|
| save_size = (png_size_t)png_ptr->idat_size;
|
| /* check for overflow */
|
| - if((png_uint_32)save_size != png_ptr->idat_size)
|
| + if ((png_uint_32)save_size != png_ptr->idat_size)
|
| png_error(png_ptr, "save_size overflowed in pngpread");
|
| }
|
| else
|
| @@ -720,7 +720,7 @@
|
| {
|
| save_size = (png_size_t)png_ptr->idat_size;
|
| /* check for overflow */
|
| - if((png_uint_32)save_size != png_ptr->idat_size)
|
| + if ((png_uint_32)save_size != png_ptr->idat_size)
|
| png_error(png_ptr, "save_size overflowed in pngpread");
|
| }
|
| else
|
| @@ -760,7 +760,7 @@
|
|
|
| png_ptr->zstream.next_in = buffer;
|
| png_ptr->zstream.avail_in = (uInt)buffer_length;
|
| - for(;;)
|
| + for (;;)
|
| {
|
| ret = inflate(&png_ptr->zstream, Z_PARTIAL_FLUSH);
|
| if (ret != Z_OK)
|
| @@ -1020,38 +1020,33 @@
|
| png_ptr->rowbytes + 1);
|
| do
|
| {
|
| - int pass;
|
| - pass = png_ptr->pass;
|
| - pass++;
|
| - if ((pass == 1 && png_ptr->width < 5) ||
|
| - (pass == 3 && png_ptr->width < 3) ||
|
| - (pass == 5 && png_ptr->width < 2))
|
| - pass++;
|
| + png_ptr->pass++;
|
| + if ((png_ptr->pass == 1 && png_ptr->width < 5) ||
|
| + (png_ptr->pass == 3 && png_ptr->width < 3) ||
|
| + (png_ptr->pass == 5 && png_ptr->width < 2))
|
| + png_ptr->pass++;
|
|
|
| - if (pass > 7)
|
| - pass--;
|
| - png_ptr->pass = (png_byte) pass;
|
| - if (pass < 7)
|
| - {
|
| - png_ptr->iwidth = (png_ptr->width +
|
| - png_pass_inc[pass] - 1 -
|
| - png_pass_start[pass]) /
|
| - png_pass_inc[pass];
|
| + if (png_ptr->pass > 7)
|
| + png_ptr->pass--;
|
| + if (png_ptr->pass >= 7)
|
| + break;
|
|
|
| - png_ptr->irowbytes = PNG_ROWBYTES(png_ptr->pixel_depth,
|
| - png_ptr->iwidth) + 1;
|
| + png_ptr->iwidth = (png_ptr->width +
|
| + png_pass_inc[png_ptr->pass] - 1 -
|
| + png_pass_start[png_ptr->pass]) /
|
| + png_pass_inc[png_ptr->pass];
|
|
|
| - if (png_ptr->transformations & PNG_INTERLACE)
|
| - break;
|
| + png_ptr->irowbytes = PNG_ROWBYTES(png_ptr->pixel_depth,
|
| + png_ptr->iwidth) + 1;
|
|
|
| - png_ptr->num_rows = (png_ptr->height +
|
| - png_pass_yinc[pass] - 1 -
|
| - png_pass_ystart[pass]) /
|
| - png_pass_yinc[pass];
|
| - }
|
| - else
|
| - break;
|
| + if (png_ptr->transformations & PNG_INTERLACE)
|
| + break;
|
|
|
| + png_ptr->num_rows = (png_ptr->height +
|
| + png_pass_yinc[png_ptr->pass] - 1 -
|
| + png_pass_ystart[png_ptr->pass]) /
|
| + png_pass_yinc[png_ptr->pass];
|
| +
|
| } while (png_ptr->iwidth == 0 || png_ptr->num_rows == 0);
|
| }
|
| }
|
| @@ -1079,7 +1074,7 @@
|
| #endif
|
|
|
| png_ptr->current_text = (png_charp)png_malloc(png_ptr,
|
| - (png_uint_32)(length+1));
|
| + (png_uint_32)(length + 1));
|
| png_ptr->current_text[length] = '\0';
|
| png_ptr->current_text_ptr = png_ptr->current_text;
|
| png_ptr->current_text_size = (png_size_t)length;
|
| @@ -1177,7 +1172,7 @@
|
| #endif
|
|
|
| png_ptr->current_text = (png_charp)png_malloc(png_ptr,
|
| - (png_uint_32)(length+1));
|
| + (png_uint_32)(length + 1));
|
| png_ptr->current_text[length] = '\0';
|
| png_ptr->current_text_ptr = png_ptr->current_text;
|
| png_ptr->current_text_size = (png_size_t)length;
|
| @@ -1268,8 +1263,8 @@
|
| if (text == NULL)
|
| {
|
| text = (png_charp)png_malloc(png_ptr,
|
| - (png_uint_32)(png_ptr->zbuf_size - png_ptr->zstream.avail_out
|
| - + key_size + 1));
|
| + (png_uint_32)(png_ptr->zbuf_size
|
| + - png_ptr->zstream.avail_out + key_size + 1));
|
| png_memcpy(text + key_size, png_ptr->zbuf,
|
| png_ptr->zbuf_size - png_ptr->zstream.avail_out);
|
| png_memcpy(text, key, key_size);
|
| @@ -1283,8 +1278,8 @@
|
|
|
| tmp = text;
|
| text = (png_charp)png_malloc(png_ptr, text_size +
|
| - (png_uint_32)(png_ptr->zbuf_size - png_ptr->zstream.avail_out
|
| - + 1));
|
| + (png_uint_32)(png_ptr->zbuf_size
|
| + - png_ptr->zstream.avail_out + 1));
|
| png_memcpy(text, tmp, text_size);
|
| png_free(png_ptr, tmp);
|
| png_memcpy(text + text_size, png_ptr->zbuf,
|
| @@ -1367,7 +1362,7 @@
|
| #endif
|
|
|
| png_ptr->current_text = (png_charp)png_malloc(png_ptr,
|
| - (png_uint_32)(length+1));
|
| + (png_uint_32)(length + 1));
|
| png_ptr->current_text[length] = '\0';
|
| png_ptr->current_text_ptr = png_ptr->current_text;
|
| png_ptr->current_text_size = (png_size_t)length;
|
| @@ -1468,22 +1463,21 @@
|
| png_push_handle_unknown(png_structp png_ptr, png_infop info_ptr, png_uint_32
|
| length)
|
| {
|
| - png_uint_32 skip=0;
|
| - png_check_chunk_name(png_ptr, png_ptr->chunk_name);
|
| + png_uint_32 skip = 0;
|
|
|
| if (!(png_ptr->chunk_name[0] & 0x20))
|
| {
|
| #if defined(PNG_READ_UNKNOWN_CHUNKS_SUPPORTED)
|
| - if(png_handle_as_unknown(png_ptr, png_ptr->chunk_name) !=
|
| - PNG_HANDLE_CHUNK_ALWAYS
|
| + if (png_handle_as_unknown(png_ptr, png_ptr->chunk_name) !=
|
| + PNG_HANDLE_CHUNK_ALWAYS
|
| #if defined(PNG_READ_USER_CHUNKS_SUPPORTED)
|
| - && png_ptr->read_user_chunk_fn == NULL
|
| + && png_ptr->read_user_chunk_fn == NULL
|
| #endif
|
| - )
|
| + )
|
| #endif
|
| - png_chunk_error(png_ptr, "unknown critical chunk");
|
| + png_chunk_error(png_ptr, "unknown critical chunk");
|
|
|
| - info_ptr = info_ptr; /* to quiet some compiler warnings */
|
| + info_ptr = info_ptr; /* to quiet some compiler warnings */
|
| }
|
|
|
| #if defined(PNG_READ_UNKNOWN_CHUNKS_SUPPORTED)
|
| @@ -1500,18 +1494,20 @@
|
| png_memcpy((png_charp)png_ptr->unknown_chunk.name,
|
| (png_charp)png_ptr->chunk_name,
|
| png_sizeof(png_ptr->unknown_chunk.name));
|
| - png_ptr->unknown_chunk.name[png_sizeof(png_ptr->unknown_chunk.name)-1]='\0';
|
| + png_ptr->unknown_chunk.name[png_sizeof(png_ptr->unknown_chunk.name) - 1]
|
| + = '\0';
|
|
|
| png_ptr->unknown_chunk.size = (png_size_t)length;
|
| if (length == 0)
|
| png_ptr->unknown_chunk.data = NULL;
|
| else
|
| {
|
| - png_ptr->unknown_chunk.data = (png_bytep)png_malloc(png_ptr, length);
|
| + png_ptr->unknown_chunk.data = (png_bytep)png_malloc(png_ptr,
|
| + (png_uint_32)length);
|
| png_crc_read(png_ptr, (png_bytep)png_ptr->unknown_chunk.data, length);
|
| }
|
| #if defined(PNG_READ_USER_CHUNKS_SUPPORTED)
|
| - if(png_ptr->read_user_chunk_fn != NULL)
|
| + if (png_ptr->read_user_chunk_fn != NULL)
|
| {
|
| /* callback to user unknown chunk handler */
|
| int ret;
|
| @@ -1522,7 +1518,7 @@
|
| if (ret == 0)
|
| {
|
| if (!(png_ptr->chunk_name[0] & 0x20))
|
| - if(png_handle_as_unknown(png_ptr, png_ptr->chunk_name) !=
|
| + if (png_handle_as_unknown(png_ptr, png_ptr->chunk_name) !=
|
| PNG_HANDLE_CHUNK_ALWAYS)
|
| png_chunk_error(png_ptr, "unknown critical chunk");
|
| png_set_unknown_chunks(png_ptr, info_ptr,
|
| @@ -1571,7 +1567,7 @@
|
| PNG_CONST int FARDATA png_pass_dsp_mask[7] =
|
| {0xff, 0x0f, 0xff, 0x33, 0xff, 0x55, 0xff};
|
| #endif
|
| - if(png_ptr == NULL) return;
|
| + if (png_ptr == NULL) return;
|
| if (new_row != NULL) /* new_row must == png_ptr->row_buf here. */
|
| png_combine_row(png_ptr, old_row, png_pass_dsp_mask[png_ptr->pass]);
|
| }
|
| @@ -1581,7 +1577,7 @@
|
| png_progressive_info_ptr info_fn, png_progressive_row_ptr row_fn,
|
| png_progressive_end_ptr end_fn)
|
| {
|
| - if(png_ptr == NULL) return;
|
| + if (png_ptr == NULL) return;
|
| png_ptr->info_fn = info_fn;
|
| png_ptr->row_fn = row_fn;
|
| png_ptr->end_fn = end_fn;
|
| @@ -1592,7 +1588,7 @@
|
| png_voidp PNGAPI
|
| png_get_progressive_ptr(png_structp png_ptr)
|
| {
|
| - if(png_ptr == NULL) return (NULL);
|
| + if (png_ptr == NULL) return (NULL);
|
| return png_ptr->io_ptr;
|
| }
|
| #endif /* PNG_PROGRESSIVE_READ_SUPPORTED */
|
|
|