OLD | NEW |
1 | 1 |
2 /* pngset.c - storage of image information into info struct | 2 /* pngset.c - storage of image information into info struct |
3 * | 3 * |
4 * Last changed in libpng 1.6.3 [July 18, 2013] | 4 * Last changed in libpng 1.2.43 [February 25, 2010] |
5 * Copyright (c) 1998-2013 Glenn Randers-Pehrson | 5 * Copyright (c) 1998-2010 Glenn Randers-Pehrson |
6 * (Version 0.96 Copyright (c) 1996, 1997 Andreas Dilger) | 6 * (Version 0.96 Copyright (c) 1996, 1997 Andreas Dilger) |
7 * (Version 0.88 Copyright (c) 1995, 1996 Guy Eric Schalnat, Group 42, Inc.) | 7 * (Version 0.88 Copyright (c) 1995, 1996 Guy Eric Schalnat, Group 42, Inc.) |
8 * | 8 * |
9 * This code is released under the libpng license. | 9 * This code is released under the libpng license. |
10 * For conditions of distribution and use, see the disclaimer | 10 * For conditions of distribution and use, see the disclaimer |
11 * and license in png.h | 11 * and license in png.h |
12 * | 12 * |
13 * The functions here are used during reads to store data from the file | 13 * The functions here are used during reads to store data from the file |
14 * into the info struct, and during writes to store application data | 14 * into the info struct, and during writes to store application data |
15 * into the info struct for writing into the file. This abstracts the | 15 * into the info struct for writing into the file. This abstracts the |
16 * info struct and allows us to change the structure in the future. | 16 * info struct and allows us to change the structure in the future. |
17 */ | 17 */ |
18 | 18 |
19 #include "pngpriv.h" | 19 #define PNG_INTERNAL |
20 | 20 #define PNG_NO_PEDANTIC_WARNINGS |
| 21 #include "png.h" |
21 #if defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED) | 22 #if defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED) |
22 | 23 |
23 #ifdef PNG_bKGD_SUPPORTED | 24 #ifdef PNG_bKGD_SUPPORTED |
24 void PNGAPI | 25 void PNGAPI |
25 png_set_bKGD(png_const_structrp png_ptr, png_inforp info_ptr, | 26 png_set_bKGD(png_structp png_ptr, png_infop info_ptr, png_color_16p background) |
26 png_const_color_16p background) | |
27 { | 27 { |
28 png_debug1(1, "in %s storage function", "bKGD"); | 28 png_debug1(1, "in %s storage function", "bKGD"); |
29 | 29 |
30 if (png_ptr == NULL || info_ptr == NULL || background == NULL) | 30 if (png_ptr == NULL || info_ptr == NULL) |
31 return; | 31 return; |
32 | 32 |
33 info_ptr->background = *background; | 33 png_memcpy(&(info_ptr->background), background, png_sizeof(png_color_16)); |
34 info_ptr->valid |= PNG_INFO_bKGD; | 34 info_ptr->valid |= PNG_INFO_bKGD; |
35 } | 35 } |
36 #endif | 36 #endif |
37 | 37 |
38 #ifdef PNG_cHRM_SUPPORTED | 38 #ifdef PNG_cHRM_SUPPORTED |
39 void PNGFAPI | 39 #ifdef PNG_FLOATING_POINT_SUPPORTED |
40 png_set_cHRM_fixed(png_const_structrp png_ptr, png_inforp info_ptr, | 40 void PNGAPI |
41 png_fixed_point white_x, png_fixed_point white_y, png_fixed_point red_x, | 41 png_set_cHRM(png_structp png_ptr, png_infop info_ptr, |
42 png_fixed_point red_y, png_fixed_point green_x, png_fixed_point green_y, | 42 double white_x, double white_y, double red_x, double red_y, |
43 png_fixed_point blue_x, png_fixed_point blue_y) | 43 double green_x, double green_y, double blue_x, double blue_y) |
44 { | 44 { |
45 png_xy xy; | 45 png_debug1(1, "in %s storage function", "cHRM"); |
46 | 46 |
| 47 if (png_ptr == NULL || info_ptr == NULL) |
| 48 return; |
| 49 |
| 50 info_ptr->x_white = (float)white_x; |
| 51 info_ptr->y_white = (float)white_y; |
| 52 info_ptr->x_red = (float)red_x; |
| 53 info_ptr->y_red = (float)red_y; |
| 54 info_ptr->x_green = (float)green_x; |
| 55 info_ptr->y_green = (float)green_y; |
| 56 info_ptr->x_blue = (float)blue_x; |
| 57 info_ptr->y_blue = (float)blue_y; |
| 58 #ifdef PNG_FIXED_POINT_SUPPORTED |
| 59 info_ptr->int_x_white = (png_fixed_point)(white_x*100000.+0.5); |
| 60 info_ptr->int_y_white = (png_fixed_point)(white_y*100000.+0.5); |
| 61 info_ptr->int_x_red = (png_fixed_point)( red_x*100000.+0.5); |
| 62 info_ptr->int_y_red = (png_fixed_point)( red_y*100000.+0.5); |
| 63 info_ptr->int_x_green = (png_fixed_point)(green_x*100000.+0.5); |
| 64 info_ptr->int_y_green = (png_fixed_point)(green_y*100000.+0.5); |
| 65 info_ptr->int_x_blue = (png_fixed_point)( blue_x*100000.+0.5); |
| 66 info_ptr->int_y_blue = (png_fixed_point)( blue_y*100000.+0.5); |
| 67 #endif |
| 68 info_ptr->valid |= PNG_INFO_cHRM; |
| 69 } |
| 70 #endif /* PNG_FLOATING_POINT_SUPPORTED */ |
| 71 |
| 72 #ifdef PNG_FIXED_POINT_SUPPORTED |
| 73 void PNGAPI |
| 74 png_set_cHRM_fixed(png_structp png_ptr, png_infop info_ptr, |
| 75 png_fixed_point white_x, png_fixed_point white_y, png_fixed_point red_x, |
| 76 png_fixed_point red_y, png_fixed_point green_x, png_fixed_point green_y, |
| 77 png_fixed_point blue_x, png_fixed_point blue_y) |
| 78 { |
47 png_debug1(1, "in %s storage function", "cHRM fixed"); | 79 png_debug1(1, "in %s storage function", "cHRM fixed"); |
48 | 80 |
49 if (png_ptr == NULL || info_ptr == NULL) | 81 if (png_ptr == NULL || info_ptr == NULL) |
50 return; | 82 return; |
51 | 83 |
52 xy.redx = red_x; | 84 #ifdef PNG_CHECK_cHRM_SUPPORTED |
53 xy.redy = red_y; | 85 if (png_check_cHRM_fixed(png_ptr, |
54 xy.greenx = green_x; | 86 white_x, white_y, red_x, red_y, green_x, green_y, blue_x, blue_y)) |
55 xy.greeny = green_y; | 87 #endif |
56 xy.bluex = blue_x; | 88 { |
57 xy.bluey = blue_y; | 89 info_ptr->int_x_white = white_x; |
58 xy.whitex = white_x; | 90 info_ptr->int_y_white = white_y; |
59 xy.whitey = white_y; | 91 info_ptr->int_x_red = red_x; |
60 | 92 info_ptr->int_y_red = red_y; |
61 if (png_colorspace_set_chromaticities(png_ptr, &info_ptr->colorspace, &xy, | 93 info_ptr->int_x_green = green_x; |
62 2/* override with app values*/)) | 94 info_ptr->int_y_green = green_y; |
63 info_ptr->colorspace.flags |= PNG_COLORSPACE_FROM_cHRM; | 95 info_ptr->int_x_blue = blue_x; |
64 | 96 info_ptr->int_y_blue = blue_y; |
65 png_colorspace_sync_info(png_ptr, info_ptr); | 97 #ifdef PNG_FLOATING_POINT_SUPPORTED |
| 98 info_ptr->x_white = (float)(white_x/100000.); |
| 99 info_ptr->y_white = (float)(white_y/100000.); |
| 100 info_ptr->x_red = (float)( red_x/100000.); |
| 101 info_ptr->y_red = (float)( red_y/100000.); |
| 102 info_ptr->x_green = (float)(green_x/100000.); |
| 103 info_ptr->y_green = (float)(green_y/100000.); |
| 104 info_ptr->x_blue = (float)( blue_x/100000.); |
| 105 info_ptr->y_blue = (float)( blue_y/100000.); |
| 106 #endif |
| 107 info_ptr->valid |= PNG_INFO_cHRM; |
| 108 } |
66 } | 109 } |
67 | 110 #endif /* PNG_FIXED_POINT_SUPPORTED */ |
68 void PNGFAPI | |
69 png_set_cHRM_XYZ_fixed(png_const_structrp png_ptr, png_inforp info_ptr, | |
70 png_fixed_point int_red_X, png_fixed_point int_red_Y, | |
71 png_fixed_point int_red_Z, png_fixed_point int_green_X, | |
72 png_fixed_point int_green_Y, png_fixed_point int_green_Z, | |
73 png_fixed_point int_blue_X, png_fixed_point int_blue_Y, | |
74 png_fixed_point int_blue_Z) | |
75 { | |
76 png_XYZ XYZ; | |
77 | |
78 png_debug1(1, "in %s storage function", "cHRM XYZ fixed"); | |
79 | |
80 if (png_ptr == NULL || info_ptr == NULL) | |
81 return; | |
82 | |
83 XYZ.red_X = int_red_X; | |
84 XYZ.red_Y = int_red_Y; | |
85 XYZ.red_Z = int_red_Z; | |
86 XYZ.green_X = int_green_X; | |
87 XYZ.green_Y = int_green_Y; | |
88 XYZ.green_Z = int_green_Z; | |
89 XYZ.blue_X = int_blue_X; | |
90 XYZ.blue_Y = int_blue_Y; | |
91 XYZ.blue_Z = int_blue_Z; | |
92 | |
93 if (png_colorspace_set_endpoints(png_ptr, &info_ptr->colorspace, &XYZ, 2)) | |
94 info_ptr->colorspace.flags |= PNG_COLORSPACE_FROM_cHRM; | |
95 | |
96 png_colorspace_sync_info(png_ptr, info_ptr); | |
97 } | |
98 | |
99 # ifdef PNG_FLOATING_POINT_SUPPORTED | |
100 void PNGAPI | |
101 png_set_cHRM(png_const_structrp png_ptr, png_inforp info_ptr, | |
102 double white_x, double white_y, double red_x, double red_y, | |
103 double green_x, double green_y, double blue_x, double blue_y) | |
104 { | |
105 png_set_cHRM_fixed(png_ptr, info_ptr, | |
106 png_fixed(png_ptr, white_x, "cHRM White X"), | |
107 png_fixed(png_ptr, white_y, "cHRM White Y"), | |
108 png_fixed(png_ptr, red_x, "cHRM Red X"), | |
109 png_fixed(png_ptr, red_y, "cHRM Red Y"), | |
110 png_fixed(png_ptr, green_x, "cHRM Green X"), | |
111 png_fixed(png_ptr, green_y, "cHRM Green Y"), | |
112 png_fixed(png_ptr, blue_x, "cHRM Blue X"), | |
113 png_fixed(png_ptr, blue_y, "cHRM Blue Y")); | |
114 } | |
115 | |
116 void PNGAPI | |
117 png_set_cHRM_XYZ(png_const_structrp png_ptr, png_inforp info_ptr, double red_X, | |
118 double red_Y, double red_Z, double green_X, double green_Y, double green_Z, | |
119 double blue_X, double blue_Y, double blue_Z) | |
120 { | |
121 png_set_cHRM_XYZ_fixed(png_ptr, info_ptr, | |
122 png_fixed(png_ptr, red_X, "cHRM Red X"), | |
123 png_fixed(png_ptr, red_Y, "cHRM Red Y"), | |
124 png_fixed(png_ptr, red_Z, "cHRM Red Z"), | |
125 png_fixed(png_ptr, green_X, "cHRM Red X"), | |
126 png_fixed(png_ptr, green_Y, "cHRM Red Y"), | |
127 png_fixed(png_ptr, green_Z, "cHRM Red Z"), | |
128 png_fixed(png_ptr, blue_X, "cHRM Red X"), | |
129 png_fixed(png_ptr, blue_Y, "cHRM Red Y"), | |
130 png_fixed(png_ptr, blue_Z, "cHRM Red Z")); | |
131 } | |
132 # endif /* PNG_FLOATING_POINT_SUPPORTED */ | |
133 | |
134 #endif /* PNG_cHRM_SUPPORTED */ | 111 #endif /* PNG_cHRM_SUPPORTED */ |
135 | 112 |
136 #ifdef PNG_gAMA_SUPPORTED | 113 #ifdef PNG_gAMA_SUPPORTED |
137 void PNGFAPI | 114 #ifdef PNG_FLOATING_POINT_SUPPORTED |
138 png_set_gAMA_fixed(png_const_structrp png_ptr, png_inforp info_ptr, | 115 void PNGAPI |
139 png_fixed_point file_gamma) | 116 png_set_gAMA(png_structp png_ptr, png_infop info_ptr, double file_gamma) |
140 { | 117 { |
| 118 double png_gamma; |
| 119 |
141 png_debug1(1, "in %s storage function", "gAMA"); | 120 png_debug1(1, "in %s storage function", "gAMA"); |
142 | 121 |
143 if (png_ptr == NULL || info_ptr == NULL) | 122 if (png_ptr == NULL || info_ptr == NULL) |
144 return; | 123 return; |
145 | 124 |
146 png_colorspace_set_gamma(png_ptr, &info_ptr->colorspace, file_gamma); | 125 /* Check for overflow */ |
147 png_colorspace_sync_info(png_ptr, info_ptr); | 126 if (file_gamma > 21474.83) |
| 127 { |
| 128 png_warning(png_ptr, "Limiting gamma to 21474.83"); |
| 129 png_gamma=21474.83; |
| 130 } |
| 131 else |
| 132 png_gamma = file_gamma; |
| 133 info_ptr->gamma = (float)png_gamma; |
| 134 #ifdef PNG_FIXED_POINT_SUPPORTED |
| 135 info_ptr->int_gamma = (int)(png_gamma*100000.+.5); |
| 136 #endif |
| 137 info_ptr->valid |= PNG_INFO_gAMA; |
| 138 if (png_gamma == 0.0) |
| 139 png_warning(png_ptr, "Setting gamma=0"); |
148 } | 140 } |
| 141 #endif |
| 142 void PNGAPI |
| 143 png_set_gAMA_fixed(png_structp png_ptr, png_infop info_ptr, png_fixed_point |
| 144 int_gamma) |
| 145 { |
| 146 png_fixed_point png_gamma; |
149 | 147 |
150 # ifdef PNG_FLOATING_POINT_SUPPORTED | 148 png_debug1(1, "in %s storage function", "gAMA"); |
151 void PNGAPI | 149 |
152 png_set_gAMA(png_const_structrp png_ptr, png_inforp info_ptr, double file_gamma) | 150 if (png_ptr == NULL || info_ptr == NULL) |
153 { | 151 return; |
154 png_set_gAMA_fixed(png_ptr, info_ptr, png_fixed(png_ptr, file_gamma, | 152 |
155 "png_set_gAMA")); | 153 if (int_gamma > (png_fixed_point)PNG_UINT_31_MAX) |
| 154 { |
| 155 png_warning(png_ptr, "Limiting gamma to 21474.83"); |
| 156 png_gamma=PNG_UINT_31_MAX; |
| 157 } |
| 158 else |
| 159 { |
| 160 if (int_gamma < 0) |
| 161 { |
| 162 png_warning(png_ptr, "Setting negative gamma to zero"); |
| 163 png_gamma = 0; |
| 164 } |
| 165 else |
| 166 png_gamma = int_gamma; |
| 167 } |
| 168 #ifdef PNG_FLOATING_POINT_SUPPORTED |
| 169 info_ptr->gamma = (float)(png_gamma/100000.); |
| 170 #endif |
| 171 #ifdef PNG_FIXED_POINT_SUPPORTED |
| 172 info_ptr->int_gamma = png_gamma; |
| 173 #endif |
| 174 info_ptr->valid |= PNG_INFO_gAMA; |
| 175 if (png_gamma == 0) |
| 176 png_warning(png_ptr, "Setting gamma=0"); |
156 } | 177 } |
157 # endif | |
158 #endif | 178 #endif |
159 | 179 |
160 #ifdef PNG_hIST_SUPPORTED | 180 #ifdef PNG_hIST_SUPPORTED |
161 void PNGAPI | 181 void PNGAPI |
162 png_set_hIST(png_const_structrp png_ptr, png_inforp info_ptr, | 182 png_set_hIST(png_structp png_ptr, png_infop info_ptr, png_uint_16p hist) |
163 png_const_uint_16p hist) | |
164 { | 183 { |
165 int i; | 184 int i; |
166 | 185 |
167 png_debug1(1, "in %s storage function", "hIST"); | 186 png_debug1(1, "in %s storage function", "hIST"); |
168 | 187 |
169 if (png_ptr == NULL || info_ptr == NULL) | 188 if (png_ptr == NULL || info_ptr == NULL) |
170 return; | 189 return; |
171 | 190 |
172 if (info_ptr->num_palette == 0 || info_ptr->num_palette | 191 if (info_ptr->num_palette == 0 || info_ptr->num_palette |
173 > PNG_MAX_PALETTE_LENGTH) | 192 > PNG_MAX_PALETTE_LENGTH) |
174 { | 193 { |
175 png_warning(png_ptr, | 194 png_warning(png_ptr, |
176 "Invalid palette size, hIST allocation skipped"); | 195 "Invalid palette size, hIST allocation skipped."); |
177 | |
178 return; | 196 return; |
179 } | 197 } |
180 | 198 |
| 199 #ifdef PNG_FREE_ME_SUPPORTED |
181 png_free_data(png_ptr, info_ptr, PNG_FREE_HIST, 0); | 200 png_free_data(png_ptr, info_ptr, PNG_FREE_HIST, 0); |
182 | 201 #endif |
183 /* Changed from info->num_palette to PNG_MAX_PALETTE_LENGTH in | 202 /* Changed from info->num_palette to PNG_MAX_PALETTE_LENGTH in |
184 * version 1.2.1 | 203 * version 1.2.1 |
185 */ | 204 */ |
186 info_ptr->hist = png_voidcast(png_uint_16p, png_malloc_warn(png_ptr, | 205 png_ptr->hist = (png_uint_16p)png_malloc_warn(png_ptr, |
187 PNG_MAX_PALETTE_LENGTH * (sizeof (png_uint_16)))); | 206 (png_uint_32)(PNG_MAX_PALETTE_LENGTH * png_sizeof(png_uint_16))); |
188 | 207 if (png_ptr->hist == NULL) |
189 if (info_ptr->hist == NULL) | |
190 { | 208 { |
191 png_warning(png_ptr, "Insufficient memory for hIST chunk data"); | 209 png_warning(png_ptr, "Insufficient memory for hIST chunk data."); |
192 return; | 210 return; |
193 } | 211 } |
194 | 212 |
| 213 for (i = 0; i < info_ptr->num_palette; i++) |
| 214 png_ptr->hist[i] = hist[i]; |
| 215 info_ptr->hist = png_ptr->hist; |
| 216 info_ptr->valid |= PNG_INFO_hIST; |
| 217 |
| 218 #ifdef PNG_FREE_ME_SUPPORTED |
195 info_ptr->free_me |= PNG_FREE_HIST; | 219 info_ptr->free_me |= PNG_FREE_HIST; |
196 | 220 #else |
197 for (i = 0; i < info_ptr->num_palette; i++) | 221 png_ptr->flags |= PNG_FLAG_FREE_HIST; |
198 info_ptr->hist[i] = hist[i]; | 222 #endif |
199 | |
200 info_ptr->valid |= PNG_INFO_hIST; | |
201 } | 223 } |
202 #endif | 224 #endif |
203 | 225 |
204 void PNGAPI | 226 void PNGAPI |
205 png_set_IHDR(png_const_structrp png_ptr, png_inforp info_ptr, | 227 png_set_IHDR(png_structp png_ptr, png_infop info_ptr, |
206 png_uint_32 width, png_uint_32 height, int bit_depth, | 228 png_uint_32 width, png_uint_32 height, int bit_depth, |
207 int color_type, int interlace_type, int compression_type, | 229 int color_type, int interlace_type, int compression_type, |
208 int filter_type) | 230 int filter_type) |
209 { | 231 { |
210 png_debug1(1, "in %s storage function", "IHDR"); | 232 png_debug1(1, "in %s storage function", "IHDR"); |
211 | 233 |
212 if (png_ptr == NULL || info_ptr == NULL) | 234 if (png_ptr == NULL || info_ptr == NULL) |
213 return; | 235 return; |
214 | 236 |
215 info_ptr->width = width; | 237 info_ptr->width = width; |
216 info_ptr->height = height; | 238 info_ptr->height = height; |
217 info_ptr->bit_depth = (png_byte)bit_depth; | 239 info_ptr->bit_depth = (png_byte)bit_depth; |
218 info_ptr->color_type = (png_byte)color_type; | 240 info_ptr->color_type = (png_byte)color_type; |
219 info_ptr->compression_type = (png_byte)compression_type; | 241 info_ptr->compression_type = (png_byte)compression_type; |
220 info_ptr->filter_type = (png_byte)filter_type; | 242 info_ptr->filter_type = (png_byte)filter_type; |
221 info_ptr->interlace_type = (png_byte)interlace_type; | 243 info_ptr->interlace_type = (png_byte)interlace_type; |
222 | 244 |
223 png_check_IHDR (png_ptr, info_ptr->width, info_ptr->height, | 245 png_check_IHDR (png_ptr, info_ptr->width, info_ptr->height, |
224 info_ptr->bit_depth, info_ptr->color_type, info_ptr->interlace_type, | 246 info_ptr->bit_depth, info_ptr->color_type, info_ptr->interlace_type, |
225 info_ptr->compression_type, info_ptr->filter_type); | 247 info_ptr->compression_type, info_ptr->filter_type); |
226 | 248 |
227 if (info_ptr->color_type == PNG_COLOR_TYPE_PALETTE) | 249 if (info_ptr->color_type == PNG_COLOR_TYPE_PALETTE) |
228 info_ptr->channels = 1; | 250 info_ptr->channels = 1; |
229 | |
230 else if (info_ptr->color_type & PNG_COLOR_MASK_COLOR) | 251 else if (info_ptr->color_type & PNG_COLOR_MASK_COLOR) |
231 info_ptr->channels = 3; | 252 info_ptr->channels = 3; |
232 | |
233 else | 253 else |
234 info_ptr->channels = 1; | 254 info_ptr->channels = 1; |
235 | |
236 if (info_ptr->color_type & PNG_COLOR_MASK_ALPHA) | 255 if (info_ptr->color_type & PNG_COLOR_MASK_ALPHA) |
237 info_ptr->channels++; | 256 info_ptr->channels++; |
238 | |
239 info_ptr->pixel_depth = (png_byte)(info_ptr->channels * info_ptr->bit_depth); | 257 info_ptr->pixel_depth = (png_byte)(info_ptr->channels * info_ptr->bit_depth); |
240 | 258 |
241 info_ptr->rowbytes = PNG_ROWBYTES(info_ptr->pixel_depth, width); | 259 /* Check for potential overflow */ |
| 260 if (width > (PNG_UINT_32_MAX |
| 261 >> 3) /* 8-byte RGBA pixels */ |
| 262 - 64 /* bigrowbuf hack */ |
| 263 - 1 /* filter byte */ |
| 264 - 7*8 /* rounding of width to multiple of 8 pixels */ |
| 265 - 8) /* extra max_pixel_depth pad */ |
| 266 info_ptr->rowbytes = (png_size_t)0; |
| 267 else |
| 268 info_ptr->rowbytes = PNG_ROWBYTES(info_ptr->pixel_depth, width); |
242 } | 269 } |
243 | 270 |
244 #ifdef PNG_oFFs_SUPPORTED | 271 #ifdef PNG_oFFs_SUPPORTED |
245 void PNGAPI | 272 void PNGAPI |
246 png_set_oFFs(png_const_structrp png_ptr, png_inforp info_ptr, | 273 png_set_oFFs(png_structp png_ptr, png_infop info_ptr, |
247 png_int_32 offset_x, png_int_32 offset_y, int unit_type) | 274 png_int_32 offset_x, png_int_32 offset_y, int unit_type) |
248 { | 275 { |
249 png_debug1(1, "in %s storage function", "oFFs"); | 276 png_debug1(1, "in %s storage function", "oFFs"); |
250 | 277 |
251 if (png_ptr == NULL || info_ptr == NULL) | 278 if (png_ptr == NULL || info_ptr == NULL) |
252 return; | 279 return; |
253 | 280 |
254 info_ptr->x_offset = offset_x; | 281 info_ptr->x_offset = offset_x; |
255 info_ptr->y_offset = offset_y; | 282 info_ptr->y_offset = offset_y; |
256 info_ptr->offset_unit_type = (png_byte)unit_type; | 283 info_ptr->offset_unit_type = (png_byte)unit_type; |
257 info_ptr->valid |= PNG_INFO_oFFs; | 284 info_ptr->valid |= PNG_INFO_oFFs; |
258 } | 285 } |
259 #endif | 286 #endif |
260 | 287 |
261 #ifdef PNG_pCAL_SUPPORTED | 288 #ifdef PNG_pCAL_SUPPORTED |
262 void PNGAPI | 289 void PNGAPI |
263 png_set_pCAL(png_const_structrp png_ptr, png_inforp info_ptr, | 290 png_set_pCAL(png_structp png_ptr, png_infop info_ptr, |
264 png_const_charp purpose, png_int_32 X0, png_int_32 X1, int type, | 291 png_charp purpose, png_int_32 X0, png_int_32 X1, int type, int nparams, |
265 int nparams, png_const_charp units, png_charpp params) | 292 png_charp units, png_charpp params) |
266 { | 293 { |
267 png_size_t length; | 294 png_uint_32 length; |
268 int i; | 295 int i; |
269 | 296 |
270 png_debug1(1, "in %s storage function", "pCAL"); | 297 png_debug1(1, "in %s storage function", "pCAL"); |
271 | 298 |
272 if (png_ptr == NULL || info_ptr == NULL || purpose == NULL || units == NULL | 299 if (png_ptr == NULL || info_ptr == NULL) |
273 || (nparams > 0 && params == NULL)) | |
274 return; | 300 return; |
275 | 301 |
276 length = strlen(purpose) + 1; | 302 length = png_strlen(purpose) + 1; |
277 png_debug1(3, "allocating purpose for info (%lu bytes)", | 303 png_debug1(3, "allocating purpose for info (%lu bytes)", |
278 (unsigned long)length); | 304 (unsigned long)length); |
279 | 305 info_ptr->pcal_purpose = (png_charp)png_malloc_warn(png_ptr, length); |
280 /* TODO: validate format of calibration name and unit name */ | |
281 | |
282 /* Check that the type matches the specification. */ | |
283 if (type < 0 || type > 3) | |
284 png_error(png_ptr, "Invalid pCAL equation type"); | |
285 | |
286 if (nparams < 0 || nparams > 255) | |
287 png_error(png_ptr, "Invalid pCAL parameter count"); | |
288 | |
289 /* Validate params[nparams] */ | |
290 for (i=0; i<nparams; ++i) | |
291 if (params[i] == NULL || | |
292 !png_check_fp_string(params[i], strlen(params[i]))) | |
293 png_error(png_ptr, "Invalid format for pCAL parameter"); | |
294 | |
295 info_ptr->pcal_purpose = png_voidcast(png_charp, | |
296 png_malloc_warn(png_ptr, length)); | |
297 | |
298 if (info_ptr->pcal_purpose == NULL) | 306 if (info_ptr->pcal_purpose == NULL) |
299 { | 307 { |
300 png_warning(png_ptr, "Insufficient memory for pCAL purpose"); | 308 png_warning(png_ptr, "Insufficient memory for pCAL purpose."); |
301 return; | 309 return; |
302 } | 310 } |
303 | 311 png_memcpy(info_ptr->pcal_purpose, purpose, (png_size_t)length); |
304 memcpy(info_ptr->pcal_purpose, purpose, length); | |
305 | 312 |
306 png_debug(3, "storing X0, X1, type, and nparams in info"); | 313 png_debug(3, "storing X0, X1, type, and nparams in info"); |
307 info_ptr->pcal_X0 = X0; | 314 info_ptr->pcal_X0 = X0; |
308 info_ptr->pcal_X1 = X1; | 315 info_ptr->pcal_X1 = X1; |
309 info_ptr->pcal_type = (png_byte)type; | 316 info_ptr->pcal_type = (png_byte)type; |
310 info_ptr->pcal_nparams = (png_byte)nparams; | 317 info_ptr->pcal_nparams = (png_byte)nparams; |
311 | 318 |
312 length = strlen(units) + 1; | 319 length = png_strlen(units) + 1; |
313 png_debug1(3, "allocating units for info (%lu bytes)", | 320 png_debug1(3, "allocating units for info (%lu bytes)", |
314 (unsigned long)length); | 321 (unsigned long)length); |
315 | 322 info_ptr->pcal_units = (png_charp)png_malloc_warn(png_ptr, length); |
316 info_ptr->pcal_units = png_voidcast(png_charp, | |
317 png_malloc_warn(png_ptr, length)); | |
318 | |
319 if (info_ptr->pcal_units == NULL) | 323 if (info_ptr->pcal_units == NULL) |
320 { | 324 { |
321 png_warning(png_ptr, "Insufficient memory for pCAL units"); | 325 png_warning(png_ptr, "Insufficient memory for pCAL units."); |
| 326 return; |
| 327 } |
| 328 png_memcpy(info_ptr->pcal_units, units, (png_size_t)length); |
| 329 |
| 330 info_ptr->pcal_params = (png_charpp)png_malloc_warn(png_ptr, |
| 331 (png_uint_32)((nparams + 1) * png_sizeof(png_charp))); |
| 332 if (info_ptr->pcal_params == NULL) |
| 333 { |
| 334 png_warning(png_ptr, "Insufficient memory for pCAL params."); |
322 return; | 335 return; |
323 } | 336 } |
324 | 337 |
325 memcpy(info_ptr->pcal_units, units, length); | 338 png_memset(info_ptr->pcal_params, 0, (nparams + 1) * png_sizeof(png_charp)); |
326 | |
327 info_ptr->pcal_params = png_voidcast(png_charpp, png_malloc_warn(png_ptr, | |
328 (png_size_t)((nparams + 1) * (sizeof (png_charp))))); | |
329 | |
330 if (info_ptr->pcal_params == NULL) | |
331 { | |
332 png_warning(png_ptr, "Insufficient memory for pCAL params"); | |
333 return; | |
334 } | |
335 | |
336 memset(info_ptr->pcal_params, 0, (nparams + 1) * (sizeof (png_charp))); | |
337 | 339 |
338 for (i = 0; i < nparams; i++) | 340 for (i = 0; i < nparams; i++) |
339 { | 341 { |
340 length = strlen(params[i]) + 1; | 342 length = png_strlen(params[i]) + 1; |
341 png_debug2(3, "allocating parameter %d for info (%lu bytes)", i, | 343 png_debug2(3, "allocating parameter %d for info (%lu bytes)", i, |
342 (unsigned long)length); | 344 (unsigned long)length); |
343 | |
344 info_ptr->pcal_params[i] = (png_charp)png_malloc_warn(png_ptr, length); | 345 info_ptr->pcal_params[i] = (png_charp)png_malloc_warn(png_ptr, length); |
345 | |
346 if (info_ptr->pcal_params[i] == NULL) | 346 if (info_ptr->pcal_params[i] == NULL) |
347 { | 347 { |
348 png_warning(png_ptr, "Insufficient memory for pCAL parameter"); | 348 png_warning(png_ptr, "Insufficient memory for pCAL parameter."); |
349 return; | 349 return; |
350 } | 350 } |
351 | 351 png_memcpy(info_ptr->pcal_params[i], params[i], (png_size_t)length); |
352 memcpy(info_ptr->pcal_params[i], params[i], length); | |
353 } | 352 } |
354 | 353 |
355 info_ptr->valid |= PNG_INFO_pCAL; | 354 info_ptr->valid |= PNG_INFO_pCAL; |
| 355 #ifdef PNG_FREE_ME_SUPPORTED |
356 info_ptr->free_me |= PNG_FREE_PCAL; | 356 info_ptr->free_me |= PNG_FREE_PCAL; |
| 357 #endif |
357 } | 358 } |
358 #endif | 359 #endif |
359 | 360 |
360 #ifdef PNG_sCAL_SUPPORTED | 361 #if defined(PNG_READ_sCAL_SUPPORTED) || defined(PNG_WRITE_sCAL_SUPPORTED) |
| 362 #ifdef PNG_FLOATING_POINT_SUPPORTED |
361 void PNGAPI | 363 void PNGAPI |
362 png_set_sCAL_s(png_const_structrp png_ptr, png_inforp info_ptr, | 364 png_set_sCAL(png_structp png_ptr, png_infop info_ptr, |
363 int unit, png_const_charp swidth, png_const_charp sheight) | 365 int unit, double width, double height) |
364 { | 366 { |
365 png_size_t lengthw = 0, lengthh = 0; | 367 png_debug1(1, "in %s storage function", "sCAL"); |
| 368 |
| 369 if (png_ptr == NULL || info_ptr == NULL) |
| 370 return; |
| 371 |
| 372 info_ptr->scal_unit = (png_byte)unit; |
| 373 info_ptr->scal_pixel_width = width; |
| 374 info_ptr->scal_pixel_height = height; |
| 375 |
| 376 info_ptr->valid |= PNG_INFO_sCAL; |
| 377 } |
| 378 #else |
| 379 #ifdef PNG_FIXED_POINT_SUPPORTED |
| 380 void PNGAPI |
| 381 png_set_sCAL_s(png_structp png_ptr, png_infop info_ptr, |
| 382 int unit, png_charp swidth, png_charp sheight) |
| 383 { |
| 384 png_uint_32 length; |
366 | 385 |
367 png_debug1(1, "in %s storage function", "sCAL"); | 386 png_debug1(1, "in %s storage function", "sCAL"); |
368 | 387 |
369 if (png_ptr == NULL || info_ptr == NULL) | 388 if (png_ptr == NULL || info_ptr == NULL) |
370 return; | 389 return; |
371 | 390 |
372 /* Double check the unit (should never get here with an invalid | |
373 * unit unless this is an API call.) | |
374 */ | |
375 if (unit != 1 && unit != 2) | |
376 png_error(png_ptr, "Invalid sCAL unit"); | |
377 | |
378 if (swidth == NULL || (lengthw = strlen(swidth)) == 0 || | |
379 swidth[0] == 45 /* '-' */ || !png_check_fp_string(swidth, lengthw)) | |
380 png_error(png_ptr, "Invalid sCAL width"); | |
381 | |
382 if (sheight == NULL || (lengthh = strlen(sheight)) == 0 || | |
383 sheight[0] == 45 /* '-' */ || !png_check_fp_string(sheight, lengthh)) | |
384 png_error(png_ptr, "Invalid sCAL height"); | |
385 | |
386 info_ptr->scal_unit = (png_byte)unit; | 391 info_ptr->scal_unit = (png_byte)unit; |
387 | 392 |
388 ++lengthw; | 393 length = png_strlen(swidth) + 1; |
389 | 394 png_debug1(3, "allocating unit for info (%u bytes)", |
390 png_debug1(3, "allocating unit for info (%u bytes)", (unsigned int)lengthw); | 395 (unsigned int)length); |
391 | 396 info_ptr->scal_s_width = (png_charp)png_malloc_warn(png_ptr, length); |
392 info_ptr->scal_s_width = png_voidcast(png_charp, | |
393 png_malloc_warn(png_ptr, lengthw)); | |
394 | |
395 if (info_ptr->scal_s_width == NULL) | 397 if (info_ptr->scal_s_width == NULL) |
396 { | 398 { |
397 png_warning(png_ptr, "Memory allocation failed while processing sCAL"); | 399 png_warning(png_ptr, |
| 400 "Memory allocation failed while processing sCAL."); |
398 return; | 401 return; |
399 } | 402 } |
| 403 png_memcpy(info_ptr->scal_s_width, swidth, (png_size_t)length); |
400 | 404 |
401 memcpy(info_ptr->scal_s_width, swidth, lengthw); | 405 length = png_strlen(sheight) + 1; |
402 | 406 png_debug1(3, "allocating unit for info (%u bytes)", |
403 ++lengthh; | 407 (unsigned int)length); |
404 | 408 info_ptr->scal_s_height = (png_charp)png_malloc_warn(png_ptr, length); |
405 png_debug1(3, "allocating unit for info (%u bytes)", (unsigned int)lengthh); | |
406 | |
407 info_ptr->scal_s_height = png_voidcast(png_charp, | |
408 png_malloc_warn(png_ptr, lengthh)); | |
409 | |
410 if (info_ptr->scal_s_height == NULL) | 409 if (info_ptr->scal_s_height == NULL) |
411 { | 410 { |
412 png_free (png_ptr, info_ptr->scal_s_width); | 411 png_free (png_ptr, info_ptr->scal_s_width); |
413 info_ptr->scal_s_width = NULL; | 412 info_ptr->scal_s_width = NULL; |
414 | 413 png_warning(png_ptr, |
415 png_warning(png_ptr, "Memory allocation failed while processing sCAL"); | 414 "Memory allocation failed while processing sCAL."); |
416 return; | 415 return; |
417 } | 416 } |
418 | 417 png_memcpy(info_ptr->scal_s_height, sheight, (png_size_t)length); |
419 memcpy(info_ptr->scal_s_height, sheight, lengthh); | |
420 | |
421 info_ptr->valid |= PNG_INFO_sCAL; | 418 info_ptr->valid |= PNG_INFO_sCAL; |
| 419 #ifdef PNG_FREE_ME_SUPPORTED |
422 info_ptr->free_me |= PNG_FREE_SCAL; | 420 info_ptr->free_me |= PNG_FREE_SCAL; |
| 421 #endif |
423 } | 422 } |
424 | 423 #endif |
425 # ifdef PNG_FLOATING_POINT_SUPPORTED | 424 #endif |
426 void PNGAPI | |
427 png_set_sCAL(png_const_structrp png_ptr, png_inforp info_ptr, int unit, | |
428 double width, double height) | |
429 { | |
430 png_debug1(1, "in %s storage function", "sCAL"); | |
431 | |
432 /* Check the arguments. */ | |
433 if (width <= 0) | |
434 png_warning(png_ptr, "Invalid sCAL width ignored"); | |
435 | |
436 else if (height <= 0) | |
437 png_warning(png_ptr, "Invalid sCAL height ignored"); | |
438 | |
439 else | |
440 { | |
441 /* Convert 'width' and 'height' to ASCII. */ | |
442 char swidth[PNG_sCAL_MAX_DIGITS+1]; | |
443 char sheight[PNG_sCAL_MAX_DIGITS+1]; | |
444 | |
445 png_ascii_from_fp(png_ptr, swidth, (sizeof swidth), width, | |
446 PNG_sCAL_PRECISION); | |
447 png_ascii_from_fp(png_ptr, sheight, (sizeof sheight), height, | |
448 PNG_sCAL_PRECISION); | |
449 | |
450 png_set_sCAL_s(png_ptr, info_ptr, unit, swidth, sheight); | |
451 } | |
452 } | |
453 # endif | |
454 | |
455 # ifdef PNG_FIXED_POINT_SUPPORTED | |
456 void PNGAPI | |
457 png_set_sCAL_fixed(png_const_structrp png_ptr, png_inforp info_ptr, int unit, | |
458 png_fixed_point width, png_fixed_point height) | |
459 { | |
460 png_debug1(1, "in %s storage function", "sCAL"); | |
461 | |
462 /* Check the arguments. */ | |
463 if (width <= 0) | |
464 png_warning(png_ptr, "Invalid sCAL width ignored"); | |
465 | |
466 else if (height <= 0) | |
467 png_warning(png_ptr, "Invalid sCAL height ignored"); | |
468 | |
469 else | |
470 { | |
471 /* Convert 'width' and 'height' to ASCII. */ | |
472 char swidth[PNG_sCAL_MAX_DIGITS+1]; | |
473 char sheight[PNG_sCAL_MAX_DIGITS+1]; | |
474 | |
475 png_ascii_from_fixed(png_ptr, swidth, (sizeof swidth), width); | |
476 png_ascii_from_fixed(png_ptr, sheight, (sizeof sheight), height); | |
477 | |
478 png_set_sCAL_s(png_ptr, info_ptr, unit, swidth, sheight); | |
479 } | |
480 } | |
481 # endif | |
482 #endif | 425 #endif |
483 | 426 |
484 #ifdef PNG_pHYs_SUPPORTED | 427 #ifdef PNG_pHYs_SUPPORTED |
485 void PNGAPI | 428 void PNGAPI |
486 png_set_pHYs(png_const_structrp png_ptr, png_inforp info_ptr, | 429 png_set_pHYs(png_structp png_ptr, png_infop info_ptr, |
487 png_uint_32 res_x, png_uint_32 res_y, int unit_type) | 430 png_uint_32 res_x, png_uint_32 res_y, int unit_type) |
488 { | 431 { |
489 png_debug1(1, "in %s storage function", "pHYs"); | 432 png_debug1(1, "in %s storage function", "pHYs"); |
490 | 433 |
491 if (png_ptr == NULL || info_ptr == NULL) | 434 if (png_ptr == NULL || info_ptr == NULL) |
492 return; | 435 return; |
493 | 436 |
494 info_ptr->x_pixels_per_unit = res_x; | 437 info_ptr->x_pixels_per_unit = res_x; |
495 info_ptr->y_pixels_per_unit = res_y; | 438 info_ptr->y_pixels_per_unit = res_y; |
496 info_ptr->phys_unit_type = (png_byte)unit_type; | 439 info_ptr->phys_unit_type = (png_byte)unit_type; |
497 info_ptr->valid |= PNG_INFO_pHYs; | 440 info_ptr->valid |= PNG_INFO_pHYs; |
498 } | 441 } |
499 #endif | 442 #endif |
500 | 443 |
501 void PNGAPI | 444 void PNGAPI |
502 png_set_PLTE(png_structrp png_ptr, png_inforp info_ptr, | 445 png_set_PLTE(png_structp png_ptr, png_infop info_ptr, |
503 png_const_colorp palette, int num_palette) | 446 png_colorp palette, int num_palette) |
504 { | 447 { |
505 | 448 |
506 png_debug1(1, "in %s storage function", "PLTE"); | 449 png_debug1(1, "in %s storage function", "PLTE"); |
507 | 450 |
508 if (png_ptr == NULL || info_ptr == NULL) | 451 if (png_ptr == NULL || info_ptr == NULL) |
509 return; | 452 return; |
510 | 453 |
511 if (num_palette < 0 || num_palette > PNG_MAX_PALETTE_LENGTH) | 454 if (num_palette < 0 || num_palette > PNG_MAX_PALETTE_LENGTH) |
512 { | 455 { |
513 if (info_ptr->color_type == PNG_COLOR_TYPE_PALETTE) | 456 if (info_ptr->color_type == PNG_COLOR_TYPE_PALETTE) |
514 png_error(png_ptr, "Invalid palette length"); | 457 png_error(png_ptr, "Invalid palette length"); |
515 | |
516 else | 458 else |
517 { | 459 { |
518 png_warning(png_ptr, "Invalid palette length"); | 460 png_warning(png_ptr, "Invalid palette length"); |
519 return; | 461 return; |
520 } | 462 } |
521 } | 463 } |
522 | 464 |
523 if ((num_palette > 0 && palette == NULL) || | |
524 (num_palette == 0 | |
525 # ifdef PNG_MNG_FEATURES_SUPPORTED | |
526 && (png_ptr->mng_features_permitted & PNG_FLAG_MNG_EMPTY_PLTE) == 0 | |
527 # endif | |
528 )) | |
529 { | |
530 png_chunk_report(png_ptr, "Invalid palette", PNG_CHUNK_ERROR); | |
531 return; | |
532 } | |
533 | |
534 /* It may not actually be necessary to set png_ptr->palette here; | 465 /* It may not actually be necessary to set png_ptr->palette here; |
535 * we do it for backward compatibility with the way the png_handle_tRNS | 466 * we do it for backward compatibility with the way the png_handle_tRNS |
536 * function used to do the allocation. | 467 * function used to do the allocation. |
537 * | 468 */ |
538 * 1.6.0: the above statement appears to be incorrect; something has to set | 469 #ifdef PNG_FREE_ME_SUPPORTED |
539 * the palette inside png_struct on read. | |
540 */ | |
541 png_free_data(png_ptr, info_ptr, PNG_FREE_PLTE, 0); | 470 png_free_data(png_ptr, info_ptr, PNG_FREE_PLTE, 0); |
| 471 #endif |
542 | 472 |
543 /* Changed in libpng-1.2.1 to allocate PNG_MAX_PALETTE_LENGTH instead | 473 /* Changed in libpng-1.2.1 to allocate PNG_MAX_PALETTE_LENGTH instead |
544 * of num_palette entries, in case of an invalid PNG file that has | 474 * of num_palette entries, in case of an invalid PNG file that has |
545 * too-large sample values. | 475 * too-large sample values. |
546 */ | 476 */ |
547 png_ptr->palette = png_voidcast(png_colorp, png_calloc(png_ptr, | 477 png_ptr->palette = (png_colorp)png_calloc(png_ptr, |
548 PNG_MAX_PALETTE_LENGTH * (sizeof (png_color)))); | 478 PNG_MAX_PALETTE_LENGTH * png_sizeof(png_color)); |
549 | 479 png_memcpy(png_ptr->palette, palette, num_palette * png_sizeof(png_color)); |
550 if (num_palette > 0) | |
551 memcpy(png_ptr->palette, palette, num_palette * (sizeof (png_color))); | |
552 info_ptr->palette = png_ptr->palette; | 480 info_ptr->palette = png_ptr->palette; |
553 info_ptr->num_palette = png_ptr->num_palette = (png_uint_16)num_palette; | 481 info_ptr->num_palette = png_ptr->num_palette = (png_uint_16)num_palette; |
554 | 482 |
| 483 #ifdef PNG_FREE_ME_SUPPORTED |
555 info_ptr->free_me |= PNG_FREE_PLTE; | 484 info_ptr->free_me |= PNG_FREE_PLTE; |
| 485 #else |
| 486 png_ptr->flags |= PNG_FLAG_FREE_PLTE; |
| 487 #endif |
556 | 488 |
557 info_ptr->valid |= PNG_INFO_PLTE; | 489 info_ptr->valid |= PNG_INFO_PLTE; |
558 } | 490 } |
559 | 491 |
560 #ifdef PNG_sBIT_SUPPORTED | 492 #ifdef PNG_sBIT_SUPPORTED |
561 void PNGAPI | 493 void PNGAPI |
562 png_set_sBIT(png_const_structrp png_ptr, png_inforp info_ptr, | 494 png_set_sBIT(png_structp png_ptr, png_infop info_ptr, |
563 png_const_color_8p sig_bit) | 495 png_color_8p sig_bit) |
564 { | 496 { |
565 png_debug1(1, "in %s storage function", "sBIT"); | 497 png_debug1(1, "in %s storage function", "sBIT"); |
566 | 498 |
567 if (png_ptr == NULL || info_ptr == NULL || sig_bit == NULL) | 499 if (png_ptr == NULL || info_ptr == NULL) |
568 return; | 500 return; |
569 | 501 |
570 info_ptr->sig_bit = *sig_bit; | 502 png_memcpy(&(info_ptr->sig_bit), sig_bit, png_sizeof(png_color_8)); |
571 info_ptr->valid |= PNG_INFO_sBIT; | 503 info_ptr->valid |= PNG_INFO_sBIT; |
572 } | 504 } |
573 #endif | 505 #endif |
574 | 506 |
575 #ifdef PNG_sRGB_SUPPORTED | 507 #ifdef PNG_sRGB_SUPPORTED |
576 void PNGAPI | 508 void PNGAPI |
577 png_set_sRGB(png_const_structrp png_ptr, png_inforp info_ptr, int srgb_intent) | 509 png_set_sRGB(png_structp png_ptr, png_infop info_ptr, int intent) |
578 { | 510 { |
579 png_debug1(1, "in %s storage function", "sRGB"); | 511 png_debug1(1, "in %s storage function", "sRGB"); |
580 | 512 |
581 if (png_ptr == NULL || info_ptr == NULL) | 513 if (png_ptr == NULL || info_ptr == NULL) |
582 return; | 514 return; |
583 | 515 |
584 (void)png_colorspace_set_sRGB(png_ptr, &info_ptr->colorspace, srgb_intent); | 516 info_ptr->srgb_intent = (png_byte)intent; |
585 png_colorspace_sync_info(png_ptr, info_ptr); | 517 info_ptr->valid |= PNG_INFO_sRGB; |
586 } | 518 } |
587 | 519 |
588 void PNGAPI | 520 void PNGAPI |
589 png_set_sRGB_gAMA_and_cHRM(png_const_structrp png_ptr, png_inforp info_ptr, | 521 png_set_sRGB_gAMA_and_cHRM(png_structp png_ptr, png_infop info_ptr, |
590 int srgb_intent) | 522 int intent) |
591 { | 523 { |
| 524 #ifdef PNG_gAMA_SUPPORTED |
| 525 #ifdef PNG_FLOATING_POINT_SUPPORTED |
| 526 float file_gamma; |
| 527 #endif |
| 528 #ifdef PNG_FIXED_POINT_SUPPORTED |
| 529 png_fixed_point int_file_gamma; |
| 530 #endif |
| 531 #endif |
| 532 #ifdef PNG_cHRM_SUPPORTED |
| 533 #ifdef PNG_FLOATING_POINT_SUPPORTED |
| 534 float white_x, white_y, red_x, red_y, green_x, green_y, blue_x, blue_y; |
| 535 #endif |
| 536 png_fixed_point int_white_x, int_white_y, int_red_x, int_red_y, int_green_x, |
| 537 int_green_y, int_blue_x, int_blue_y; |
| 538 #endif |
592 png_debug1(1, "in %s storage function", "sRGB_gAMA_and_cHRM"); | 539 png_debug1(1, "in %s storage function", "sRGB_gAMA_and_cHRM"); |
593 | 540 |
594 if (png_ptr == NULL || info_ptr == NULL) | 541 if (png_ptr == NULL || info_ptr == NULL) |
595 return; | 542 return; |
596 | 543 |
597 if (png_colorspace_set_sRGB(png_ptr, &info_ptr->colorspace, srgb_intent)) | 544 png_set_sRGB(png_ptr, info_ptr, intent); |
598 { | 545 |
599 /* This causes the gAMA and cHRM to be written too */ | 546 #ifdef PNG_gAMA_SUPPORTED |
600 info_ptr->colorspace.flags |= | 547 #ifdef PNG_FLOATING_POINT_SUPPORTED |
601 PNG_COLORSPACE_FROM_gAMA|PNG_COLORSPACE_FROM_cHRM; | 548 file_gamma = (float).45455; |
602 } | 549 png_set_gAMA(png_ptr, info_ptr, file_gamma); |
603 | 550 #endif |
604 png_colorspace_sync_info(png_ptr, info_ptr); | 551 #ifdef PNG_FIXED_POINT_SUPPORTED |
| 552 int_file_gamma = 45455L; |
| 553 png_set_gAMA_fixed(png_ptr, info_ptr, int_file_gamma); |
| 554 #endif |
| 555 #endif |
| 556 |
| 557 #ifdef PNG_cHRM_SUPPORTED |
| 558 int_white_x = 31270L; |
| 559 int_white_y = 32900L; |
| 560 int_red_x = 64000L; |
| 561 int_red_y = 33000L; |
| 562 int_green_x = 30000L; |
| 563 int_green_y = 60000L; |
| 564 int_blue_x = 15000L; |
| 565 int_blue_y = 6000L; |
| 566 |
| 567 #ifdef PNG_FLOATING_POINT_SUPPORTED |
| 568 white_x = (float).3127; |
| 569 white_y = (float).3290; |
| 570 red_x = (float).64; |
| 571 red_y = (float).33; |
| 572 green_x = (float).30; |
| 573 green_y = (float).60; |
| 574 blue_x = (float).15; |
| 575 blue_y = (float).06; |
| 576 #endif |
| 577 |
| 578 #ifdef PNG_FIXED_POINT_SUPPORTED |
| 579 png_set_cHRM_fixed(png_ptr, info_ptr, |
| 580 int_white_x, int_white_y, int_red_x, int_red_y, int_green_x, |
| 581 int_green_y, int_blue_x, int_blue_y); |
| 582 #endif |
| 583 #ifdef PNG_FLOATING_POINT_SUPPORTED |
| 584 png_set_cHRM(png_ptr, info_ptr, |
| 585 white_x, white_y, red_x, red_y, green_x, green_y, blue_x, blue_y); |
| 586 #endif |
| 587 #endif /* cHRM */ |
605 } | 588 } |
606 #endif /* sRGB */ | 589 #endif /* sRGB */ |
607 | 590 |
608 | 591 |
609 #ifdef PNG_iCCP_SUPPORTED | 592 #ifdef PNG_iCCP_SUPPORTED |
610 void PNGAPI | 593 void PNGAPI |
611 png_set_iCCP(png_const_structrp png_ptr, png_inforp info_ptr, | 594 png_set_iCCP(png_structp png_ptr, png_infop info_ptr, |
612 png_const_charp name, int compression_type, | 595 png_charp name, int compression_type, |
613 png_const_bytep profile, png_uint_32 proflen) | 596 png_charp profile, png_uint_32 proflen) |
614 { | 597 { |
615 png_charp new_iccp_name; | 598 png_charp new_iccp_name; |
616 png_bytep new_iccp_profile; | 599 png_charp new_iccp_profile; |
617 png_size_t length; | 600 png_uint_32 length; |
618 | 601 |
619 png_debug1(1, "in %s storage function", "iCCP"); | 602 png_debug1(1, "in %s storage function", "iCCP"); |
620 | 603 |
621 if (png_ptr == NULL || info_ptr == NULL || name == NULL || profile == NULL) | 604 if (png_ptr == NULL || info_ptr == NULL || name == NULL || profile == NULL) |
622 return; | 605 return; |
623 | 606 |
624 if (compression_type != PNG_COMPRESSION_TYPE_BASE) | 607 length = png_strlen(name)+1; |
625 png_app_error(png_ptr, "Invalid iCCP compression method"); | 608 new_iccp_name = (png_charp)png_malloc_warn(png_ptr, length); |
626 | |
627 /* Set the colorspace first because this validates the profile; do not | |
628 * override previously set app cHRM or gAMA here (because likely as not the | |
629 * application knows better than libpng what the correct values are.) Pass | |
630 * the info_ptr color_type field to png_colorspace_set_ICC because in the | |
631 * write case it has not yet been stored in png_ptr. | |
632 */ | |
633 { | |
634 int result = png_colorspace_set_ICC(png_ptr, &info_ptr->colorspace, name, | |
635 proflen, profile, info_ptr->color_type); | |
636 | |
637 png_colorspace_sync_info(png_ptr, info_ptr); | |
638 | |
639 /* Don't do any of the copying if the profile was bad, or inconsistent. */ | |
640 if (!result) | |
641 return; | |
642 | |
643 /* But do write the gAMA and cHRM chunks from the profile. */ | |
644 info_ptr->colorspace.flags |= | |
645 PNG_COLORSPACE_FROM_gAMA|PNG_COLORSPACE_FROM_cHRM; | |
646 } | |
647 | |
648 length = strlen(name)+1; | |
649 new_iccp_name = png_voidcast(png_charp, png_malloc_warn(png_ptr, length)); | |
650 | |
651 if (new_iccp_name == NULL) | 609 if (new_iccp_name == NULL) |
652 { | 610 { |
653 png_benign_error(png_ptr, "Insufficient memory to process iCCP chunk"); | 611 png_warning(png_ptr, "Insufficient memory to process iCCP chunk."); |
654 return; | 612 return; |
655 } | 613 } |
656 | 614 png_memcpy(new_iccp_name, name, length); |
657 memcpy(new_iccp_name, name, length); | 615 new_iccp_profile = (png_charp)png_malloc_warn(png_ptr, proflen); |
658 new_iccp_profile = png_voidcast(png_bytep, | |
659 png_malloc_warn(png_ptr, proflen)); | |
660 | |
661 if (new_iccp_profile == NULL) | 616 if (new_iccp_profile == NULL) |
662 { | 617 { |
663 png_free(png_ptr, new_iccp_name); | 618 png_free (png_ptr, new_iccp_name); |
664 png_benign_error(png_ptr, | 619 png_warning(png_ptr, |
665 "Insufficient memory to process iCCP profile"); | 620 "Insufficient memory to process iCCP profile."); |
666 return; | 621 return; |
667 } | 622 } |
668 | 623 png_memcpy(new_iccp_profile, profile, (png_size_t)proflen); |
669 memcpy(new_iccp_profile, profile, proflen); | |
670 | 624 |
671 png_free_data(png_ptr, info_ptr, PNG_FREE_ICCP, 0); | 625 png_free_data(png_ptr, info_ptr, PNG_FREE_ICCP, 0); |
672 | 626 |
673 info_ptr->iccp_proflen = proflen; | 627 info_ptr->iccp_proflen = proflen; |
674 info_ptr->iccp_name = new_iccp_name; | 628 info_ptr->iccp_name = new_iccp_name; |
675 info_ptr->iccp_profile = new_iccp_profile; | 629 info_ptr->iccp_profile = new_iccp_profile; |
| 630 /* Compression is always zero but is here so the API and info structure |
| 631 * does not have to change if we introduce multiple compression types |
| 632 */ |
| 633 info_ptr->iccp_compression = (png_byte)compression_type; |
| 634 #ifdef PNG_FREE_ME_SUPPORTED |
676 info_ptr->free_me |= PNG_FREE_ICCP; | 635 info_ptr->free_me |= PNG_FREE_ICCP; |
| 636 #endif |
677 info_ptr->valid |= PNG_INFO_iCCP; | 637 info_ptr->valid |= PNG_INFO_iCCP; |
678 } | 638 } |
679 #endif | 639 #endif |
680 | 640 |
681 #ifdef PNG_TEXT_SUPPORTED | 641 #ifdef PNG_TEXT_SUPPORTED |
682 void PNGAPI | 642 void PNGAPI |
683 png_set_text(png_const_structrp png_ptr, png_inforp info_ptr, | 643 png_set_text(png_structp png_ptr, png_infop info_ptr, png_textp text_ptr, |
684 png_const_textp text_ptr, int num_text) | 644 int num_text) |
685 { | 645 { |
686 int ret; | 646 int ret; |
687 ret = png_set_text_2(png_ptr, info_ptr, text_ptr, num_text); | 647 ret = png_set_text_2(png_ptr, info_ptr, text_ptr, num_text); |
688 | |
689 if (ret) | 648 if (ret) |
690 png_error(png_ptr, "Insufficient memory to store text"); | 649 png_error(png_ptr, "Insufficient memory to store text"); |
691 } | 650 } |
692 | 651 |
693 int /* PRIVATE */ | 652 int /* PRIVATE */ |
694 png_set_text_2(png_const_structrp png_ptr, png_inforp info_ptr, | 653 png_set_text_2(png_structp png_ptr, png_infop info_ptr, png_textp text_ptr, |
695 png_const_textp text_ptr, int num_text) | 654 int num_text) |
696 { | 655 { |
697 int i; | 656 int i; |
698 | 657 |
699 png_debug1(1, "in %lx storage function", png_ptr == NULL ? "unexpected" : | 658 png_debug1(1, "in %s storage function", ((png_ptr == NULL || |
700 (unsigned long)png_ptr->chunk_name); | 659 png_ptr->chunk_name[0] == '\0') ? |
701 | 660 "text" : (png_const_charp)png_ptr->chunk_name)); |
702 if (png_ptr == NULL || info_ptr == NULL || num_text <= 0 || text_ptr == NULL) | 661 |
| 662 if (png_ptr == NULL || info_ptr == NULL || num_text == 0) |
703 return(0); | 663 return(0); |
704 | 664 |
705 /* Make sure we have enough space in the "text" array in info_struct | 665 /* Make sure we have enough space in the "text" array in info_struct |
706 * to hold all of the incoming text_ptr objects. This compare can't overflow | 666 * to hold all of the incoming text_ptr objects. |
707 * because max_text >= num_text (anyway, subtract of two positive integers | 667 */ |
708 * can't overflow in any case.) | 668 if (info_ptr->num_text + num_text > info_ptr->max_text) |
709 */ | 669 { |
710 if (num_text > info_ptr->max_text - info_ptr->num_text) | 670 if (info_ptr->text != NULL) |
711 { | |
712 int old_num_text = info_ptr->num_text; | |
713 int max_text; | |
714 png_textp new_text = NULL; | |
715 | |
716 /* Calculate an appropriate max_text, checking for overflow. */ | |
717 max_text = old_num_text; | |
718 if (num_text <= INT_MAX - max_text) | |
719 { | 671 { |
720 max_text += num_text; | 672 png_textp old_text; |
721 | 673 int old_max; |
722 /* Round up to a multiple of 8 */ | 674 |
723 if (max_text < INT_MAX-8) | 675 old_max = info_ptr->max_text; |
724 max_text = (max_text + 8) & ~0x7; | 676 info_ptr->max_text = info_ptr->num_text + num_text + 8; |
725 | 677 old_text = info_ptr->text; |
726 else | 678 info_ptr->text = (png_textp)png_malloc_warn(png_ptr, |
727 max_text = INT_MAX; | 679 (png_uint_32)(info_ptr->max_text * png_sizeof(png_text))); |
728 | 680 if (info_ptr->text == NULL) |
729 /* Now allocate a new array and copy the old members in, this does all | 681 { |
730 * the overflow checks. | 682 png_free(png_ptr, old_text); |
731 */ | 683 return(1); |
732 new_text = png_voidcast(png_textp,png_realloc_array(png_ptr, | 684 } |
733 info_ptr->text, old_num_text, max_text-old_num_text, | 685 png_memcpy(info_ptr->text, old_text, (png_size_t)(old_max * |
734 sizeof *new_text)); | 686 png_sizeof(png_text))); |
| 687 png_free(png_ptr, old_text); |
735 } | 688 } |
736 | 689 else |
737 if (new_text == NULL) | |
738 { | 690 { |
739 png_chunk_report(png_ptr, "too many text chunks", | 691 info_ptr->max_text = num_text + 8; |
740 PNG_CHUNK_WRITE_ERROR); | 692 info_ptr->num_text = 0; |
741 return 1; | 693 info_ptr->text = (png_textp)png_malloc_warn(png_ptr, |
| 694 (png_uint_32)(info_ptr->max_text * png_sizeof(png_text))); |
| 695 if (info_ptr->text == NULL) |
| 696 return(1); |
| 697 #ifdef PNG_FREE_ME_SUPPORTED |
| 698 info_ptr->free_me |= PNG_FREE_TEXT; |
| 699 #endif |
742 } | 700 } |
743 | 701 png_debug1(3, "allocated %d entries for info_ptr->text", |
744 png_free(png_ptr, info_ptr->text); | 702 info_ptr->max_text); |
745 | 703 } |
746 info_ptr->text = new_text; | |
747 info_ptr->free_me |= PNG_FREE_TEXT; | |
748 info_ptr->max_text = max_text; | |
749 /* num_text is adjusted below as the entries are copied in */ | |
750 | |
751 png_debug1(3, "allocated %d entries for info_ptr->text", max_text); | |
752 } | |
753 | |
754 for (i = 0; i < num_text; i++) | 704 for (i = 0; i < num_text; i++) |
755 { | 705 { |
756 size_t text_length, key_len; | 706 png_size_t text_length, key_len; |
757 size_t lang_len, lang_key_len; | 707 png_size_t lang_len, lang_key_len; |
758 png_textp textp = &(info_ptr->text[info_ptr->num_text]); | 708 png_textp textp = &(info_ptr->text[info_ptr->num_text]); |
759 | 709 |
760 if (text_ptr[i].key == NULL) | 710 if (text_ptr[i].key == NULL) |
761 continue; | 711 continue; |
762 | 712 |
763 if (text_ptr[i].compression < PNG_TEXT_COMPRESSION_NONE || | 713 key_len = png_strlen(text_ptr[i].key); |
764 text_ptr[i].compression >= PNG_TEXT_COMPRESSION_LAST) | |
765 { | |
766 png_chunk_report(png_ptr, "text compression mode is out of range", | |
767 PNG_CHUNK_WRITE_ERROR); | |
768 continue; | |
769 } | |
770 | |
771 key_len = strlen(text_ptr[i].key); | |
772 | 714 |
773 if (text_ptr[i].compression <= 0) | 715 if (text_ptr[i].compression <= 0) |
774 { | 716 { |
775 lang_len = 0; | 717 lang_len = 0; |
776 lang_key_len = 0; | 718 lang_key_len = 0; |
777 } | 719 } |
778 | 720 |
779 else | 721 else |
780 # ifdef PNG_iTXt_SUPPORTED | 722 #ifdef PNG_iTXt_SUPPORTED |
781 { | 723 { |
782 /* Set iTXt data */ | 724 /* Set iTXt data */ |
783 | 725 |
784 if (text_ptr[i].lang != NULL) | 726 if (text_ptr[i].lang != NULL) |
785 lang_len = strlen(text_ptr[i].lang); | 727 lang_len = png_strlen(text_ptr[i].lang); |
786 | |
787 else | 728 else |
788 lang_len = 0; | 729 lang_len = 0; |
789 | |
790 if (text_ptr[i].lang_key != NULL) | 730 if (text_ptr[i].lang_key != NULL) |
791 lang_key_len = strlen(text_ptr[i].lang_key); | 731 lang_key_len = png_strlen(text_ptr[i].lang_key); |
792 | |
793 else | 732 else |
794 lang_key_len = 0; | 733 lang_key_len = 0; |
795 } | 734 } |
796 # else /* PNG_iTXt_SUPPORTED */ | 735 #else /* PNG_iTXt_SUPPORTED */ |
797 { | 736 { |
798 png_chunk_report(png_ptr, "iTXt chunk not supported", | 737 png_warning(png_ptr, "iTXt chunk not supported."); |
799 PNG_CHUNK_WRITE_ERROR); | |
800 continue; | 738 continue; |
801 } | 739 } |
802 # endif | 740 #endif |
803 | 741 |
804 if (text_ptr[i].text == NULL || text_ptr[i].text[0] == '\0') | 742 if (text_ptr[i].text == NULL || text_ptr[i].text[0] == '\0') |
805 { | 743 { |
806 text_length = 0; | 744 text_length = 0; |
807 # ifdef PNG_iTXt_SUPPORTED | 745 #ifdef PNG_iTXt_SUPPORTED |
808 if (text_ptr[i].compression > 0) | 746 if (text_ptr[i].compression > 0) |
809 textp->compression = PNG_ITXT_COMPRESSION_NONE; | 747 textp->compression = PNG_ITXT_COMPRESSION_NONE; |
810 | |
811 else | 748 else |
812 # endif | 749 #endif |
813 textp->compression = PNG_TEXT_COMPRESSION_NONE; | 750 textp->compression = PNG_TEXT_COMPRESSION_NONE; |
814 } | 751 } |
815 | 752 |
816 else | 753 else |
817 { | 754 { |
818 text_length = strlen(text_ptr[i].text); | 755 text_length = png_strlen(text_ptr[i].text); |
819 textp->compression = text_ptr[i].compression; | 756 textp->compression = text_ptr[i].compression; |
820 } | 757 } |
821 | 758 |
822 textp->key = png_voidcast(png_charp,png_malloc_base(png_ptr, | 759 textp->key = (png_charp)png_malloc_warn(png_ptr, |
823 key_len + text_length + lang_len + lang_key_len + 4)); | 760 (png_uint_32) |
824 | 761 (key_len + text_length + lang_len + lang_key_len + 4)); |
825 if (textp->key == NULL) | 762 if (textp->key == NULL) |
826 { | 763 return(1); |
827 png_chunk_report(png_ptr, "text chunk: out of memory", | 764 png_debug2(2, "Allocated %lu bytes at %x in png_set_text", |
828 PNG_CHUNK_WRITE_ERROR); | 765 (png_uint_32) |
829 return 1; | 766 (key_len + lang_len + lang_key_len + text_length + 4), |
830 } | 767 (int)textp->key); |
831 | 768 |
832 png_debug2(2, "Allocated %lu bytes at %p in png_set_text", | 769 png_memcpy(textp->key, text_ptr[i].key,(png_size_t)(key_len)); |
833 (unsigned long)(png_uint_32) | |
834 (key_len + lang_len + lang_key_len + text_length + 4), | |
835 textp->key); | |
836 | |
837 memcpy(textp->key, text_ptr[i].key, key_len); | |
838 *(textp->key + key_len) = '\0'; | 770 *(textp->key + key_len) = '\0'; |
839 | 771 #ifdef PNG_iTXt_SUPPORTED |
840 if (text_ptr[i].compression > 0) | 772 if (text_ptr[i].compression > 0) |
841 { | 773 { |
842 textp->lang = textp->key + key_len + 1; | 774 textp->lang = textp->key + key_len + 1; |
843 memcpy(textp->lang, text_ptr[i].lang, lang_len); | 775 png_memcpy(textp->lang, text_ptr[i].lang, lang_len); |
844 *(textp->lang + lang_len) = '\0'; | 776 *(textp->lang + lang_len) = '\0'; |
845 textp->lang_key = textp->lang + lang_len + 1; | 777 textp->lang_key = textp->lang + lang_len + 1; |
846 memcpy(textp->lang_key, text_ptr[i].lang_key, lang_key_len); | 778 png_memcpy(textp->lang_key, text_ptr[i].lang_key, lang_key_len); |
847 *(textp->lang_key + lang_key_len) = '\0'; | 779 *(textp->lang_key + lang_key_len) = '\0'; |
848 textp->text = textp->lang_key + lang_key_len + 1; | 780 textp->text = textp->lang_key + lang_key_len + 1; |
849 } | 781 } |
850 | 782 else |
851 else | 783 #endif |
852 { | 784 { |
| 785 #ifdef PNG_iTXt_SUPPORTED |
853 textp->lang=NULL; | 786 textp->lang=NULL; |
854 textp->lang_key=NULL; | 787 textp->lang_key=NULL; |
| 788 #endif |
855 textp->text = textp->key + key_len + 1; | 789 textp->text = textp->key + key_len + 1; |
856 } | 790 } |
857 | |
858 if (text_length) | 791 if (text_length) |
859 memcpy(textp->text, text_ptr[i].text, text_length); | 792 png_memcpy(textp->text, text_ptr[i].text, |
860 | 793 (png_size_t)(text_length)); |
861 *(textp->text + text_length) = '\0'; | 794 *(textp->text + text_length) = '\0'; |
862 | 795 |
863 # ifdef PNG_iTXt_SUPPORTED | 796 #ifdef PNG_iTXt_SUPPORTED |
864 if (textp->compression > 0) | 797 if (textp->compression > 0) |
865 { | 798 { |
866 textp->text_length = 0; | 799 textp->text_length = 0; |
867 textp->itxt_length = text_length; | 800 textp->itxt_length = text_length; |
868 } | 801 } |
869 | 802 else |
870 else | 803 #endif |
871 # endif | 804 |
872 { | 805 { |
873 textp->text_length = text_length; | 806 textp->text_length = text_length; |
| 807 #ifdef PNG_iTXt_SUPPORTED |
874 textp->itxt_length = 0; | 808 textp->itxt_length = 0; |
875 } | 809 #endif |
876 | 810 } |
877 info_ptr->num_text++; | 811 info_ptr->num_text++; |
878 png_debug1(3, "transferred text chunk %d", info_ptr->num_text); | 812 png_debug1(3, "transferred text chunk %d", info_ptr->num_text); |
879 } | 813 } |
880 | |
881 return(0); | 814 return(0); |
882 } | 815 } |
883 #endif | 816 #endif |
884 | 817 |
885 #ifdef PNG_tIME_SUPPORTED | 818 #ifdef PNG_tIME_SUPPORTED |
886 void PNGAPI | 819 void PNGAPI |
887 png_set_tIME(png_const_structrp png_ptr, png_inforp info_ptr, | 820 png_set_tIME(png_structp png_ptr, png_infop info_ptr, png_timep mod_time) |
888 png_const_timep mod_time) | |
889 { | 821 { |
890 png_debug1(1, "in %s storage function", "tIME"); | 822 png_debug1(1, "in %s storage function", "tIME"); |
891 | 823 |
892 if (png_ptr == NULL || info_ptr == NULL || mod_time == NULL || | 824 if (png_ptr == NULL || info_ptr == NULL || |
893 (png_ptr->mode & PNG_WROTE_tIME)) | 825 (png_ptr->mode & PNG_WROTE_tIME)) |
894 return; | 826 return; |
895 | 827 |
896 if (mod_time->month == 0 || mod_time->month > 12 || | 828 png_memcpy(&(info_ptr->mod_time), mod_time, png_sizeof(png_time)); |
897 mod_time->day == 0 || mod_time->day > 31 || | |
898 mod_time->hour > 23 || mod_time->minute > 59 || | |
899 mod_time->second > 60) | |
900 { | |
901 png_warning(png_ptr, "Ignoring invalid time value"); | |
902 return; | |
903 } | |
904 | |
905 info_ptr->mod_time = *mod_time; | |
906 info_ptr->valid |= PNG_INFO_tIME; | 829 info_ptr->valid |= PNG_INFO_tIME; |
907 } | 830 } |
908 #endif | 831 #endif |
909 | 832 |
910 #ifdef PNG_tRNS_SUPPORTED | 833 #ifdef PNG_tRNS_SUPPORTED |
911 void PNGAPI | 834 void PNGAPI |
912 png_set_tRNS(png_structrp png_ptr, png_inforp info_ptr, | 835 png_set_tRNS(png_structp png_ptr, png_infop info_ptr, |
913 png_const_bytep trans_alpha, int num_trans, png_const_color_16p trans_color) | 836 png_bytep trans, int num_trans, png_color_16p trans_values) |
914 { | 837 { |
915 png_debug1(1, "in %s storage function", "tRNS"); | 838 png_debug1(1, "in %s storage function", "tRNS"); |
916 | 839 |
917 if (png_ptr == NULL || info_ptr == NULL) | 840 if (png_ptr == NULL || info_ptr == NULL) |
918 return; | 841 return; |
919 | 842 |
920 if (trans_alpha != NULL) | 843 if (trans != NULL) |
921 { | 844 { |
922 /* It may not actually be necessary to set png_ptr->trans_alpha here; | 845 /* It may not actually be necessary to set png_ptr->trans here; |
923 * we do it for backward compatibility with the way the png_handle_tRNS | 846 * we do it for backward compatibility with the way the png_handle_tRNS |
924 * function used to do the allocation. | 847 * function used to do the allocation. |
925 * | |
926 * 1.6.0: The above statement is incorrect; png_handle_tRNS effectively | |
927 * relies on png_set_tRNS storing the information in png_struct | |
928 * (otherwise it won't be there for the code in pngrtran.c). | |
929 */ | 848 */ |
930 | 849 |
| 850 #ifdef PNG_FREE_ME_SUPPORTED |
931 png_free_data(png_ptr, info_ptr, PNG_FREE_TRNS, 0); | 851 png_free_data(png_ptr, info_ptr, PNG_FREE_TRNS, 0); |
| 852 #endif |
932 | 853 |
933 /* Changed from num_trans to PNG_MAX_PALETTE_LENGTH in version 1.2.1 */ | 854 /* Changed from num_trans to PNG_MAX_PALETTE_LENGTH in version 1.2.1 */ |
934 png_ptr->trans_alpha = info_ptr->trans_alpha = png_voidcast(png_bytep, | 855 png_ptr->trans = info_ptr->trans = (png_bytep)png_malloc(png_ptr, |
935 png_malloc(png_ptr, PNG_MAX_PALETTE_LENGTH)); | 856 (png_uint_32)PNG_MAX_PALETTE_LENGTH); |
936 | |
937 if (num_trans > 0 && num_trans <= PNG_MAX_PALETTE_LENGTH) | 857 if (num_trans > 0 && num_trans <= PNG_MAX_PALETTE_LENGTH) |
938 memcpy(info_ptr->trans_alpha, trans_alpha, (png_size_t)num_trans); | 858 png_memcpy(info_ptr->trans, trans, (png_size_t)num_trans); |
939 } | 859 } |
940 | 860 |
941 if (trans_color != NULL) | 861 if (trans_values != NULL) |
942 { | 862 { |
943 int sample_max = (1 << info_ptr->bit_depth); | 863 int sample_max = (1 << info_ptr->bit_depth); |
944 | |
945 if ((info_ptr->color_type == PNG_COLOR_TYPE_GRAY && | 864 if ((info_ptr->color_type == PNG_COLOR_TYPE_GRAY && |
946 trans_color->gray > sample_max) || | 865 (int)trans_values->gray > sample_max) || |
947 (info_ptr->color_type == PNG_COLOR_TYPE_RGB && | 866 (info_ptr->color_type == PNG_COLOR_TYPE_RGB && |
948 (trans_color->red > sample_max || | 867 ((int)trans_values->red > sample_max || |
949 trans_color->green > sample_max || | 868 (int)trans_values->green > sample_max || |
950 trans_color->blue > sample_max))) | 869 (int)trans_values->blue > sample_max))) |
951 png_warning(png_ptr, | 870 png_warning(png_ptr, |
952 "tRNS chunk has out-of-range samples for bit_depth"); | 871 "tRNS chunk has out-of-range samples for bit_depth"); |
953 | 872 png_memcpy(&(info_ptr->trans_values), trans_values, |
954 info_ptr->trans_color = *trans_color; | 873 png_sizeof(png_color_16)); |
955 | |
956 if (num_trans == 0) | 874 if (num_trans == 0) |
957 num_trans = 1; | 875 num_trans = 1; |
958 } | 876 } |
959 | 877 |
960 info_ptr->num_trans = (png_uint_16)num_trans; | 878 info_ptr->num_trans = (png_uint_16)num_trans; |
961 | |
962 if (num_trans != 0) | 879 if (num_trans != 0) |
963 { | 880 { |
964 info_ptr->valid |= PNG_INFO_tRNS; | 881 info_ptr->valid |= PNG_INFO_tRNS; |
| 882 #ifdef PNG_FREE_ME_SUPPORTED |
965 info_ptr->free_me |= PNG_FREE_TRNS; | 883 info_ptr->free_me |= PNG_FREE_TRNS; |
| 884 #else |
| 885 png_ptr->flags |= PNG_FLAG_FREE_TRNS; |
| 886 #endif |
966 } | 887 } |
967 } | 888 } |
968 #endif | 889 #endif |
969 | 890 |
970 #ifdef PNG_sPLT_SUPPORTED | 891 #ifdef PNG_sPLT_SUPPORTED |
971 void PNGAPI | 892 void PNGAPI |
972 png_set_sPLT(png_const_structrp png_ptr, | 893 png_set_sPLT(png_structp png_ptr, |
973 png_inforp info_ptr, png_const_sPLT_tp entries, int nentries) | 894 png_infop info_ptr, png_sPLT_tp entries, int nentries) |
974 /* | 895 /* |
975 * entries - array of png_sPLT_t structures | 896 * entries - array of png_sPLT_t structures |
976 * to be added to the list of palettes | 897 * to be added to the list of palettes |
977 * in the info structure. | 898 * in the info structure. |
978 * | |
979 * nentries - number of palette structures to be | 899 * nentries - number of palette structures to be |
980 * added. | 900 * added. |
981 */ | 901 */ |
982 { | 902 { |
983 png_sPLT_tp np; | 903 png_sPLT_tp np; |
984 | 904 int i; |
985 if (png_ptr == NULL || info_ptr == NULL || nentries <= 0 || entries == NULL) | 905 |
986 return; | 906 if (png_ptr == NULL || info_ptr == NULL) |
987 | 907 return; |
988 /* Use the internal realloc function, which checks for all the possible | 908 |
989 * overflows. Notice that the parameters are (int) and (size_t) | 909 np = (png_sPLT_tp)png_malloc_warn(png_ptr, |
990 */ | 910 (info_ptr->splt_palettes_num + nentries) * |
991 np = png_voidcast(png_sPLT_tp,png_realloc_array(png_ptr, | 911 (png_uint_32)png_sizeof(png_sPLT_t)); |
992 info_ptr->splt_palettes, info_ptr->splt_palettes_num, nentries, | |
993 sizeof *np)); | |
994 | |
995 if (np == NULL) | 912 if (np == NULL) |
996 { | 913 { |
997 /* Out of memory or too many chunks */ | 914 png_warning(png_ptr, "No memory for sPLT palettes."); |
998 png_chunk_report(png_ptr, "too many sPLT chunks", PNG_CHUNK_WRITE_ERROR); | 915 return; |
999 return; | 916 } |
1000 } | 917 |
1001 | 918 png_memcpy(np, info_ptr->splt_palettes, |
| 919 info_ptr->splt_palettes_num * png_sizeof(png_sPLT_t)); |
1002 png_free(png_ptr, info_ptr->splt_palettes); | 920 png_free(png_ptr, info_ptr->splt_palettes); |
| 921 info_ptr->splt_palettes=NULL; |
| 922 |
| 923 for (i = 0; i < nentries; i++) |
| 924 { |
| 925 png_sPLT_tp to = np + info_ptr->splt_palettes_num + i; |
| 926 png_sPLT_tp from = entries + i; |
| 927 png_uint_32 length; |
| 928 |
| 929 length = png_strlen(from->name) + 1; |
| 930 to->name = (png_charp)png_malloc_warn(png_ptr, length); |
| 931 if (to->name == NULL) |
| 932 { |
| 933 png_warning(png_ptr, |
| 934 "Out of memory while processing sPLT chunk"); |
| 935 continue; |
| 936 } |
| 937 png_memcpy(to->name, from->name, length); |
| 938 to->entries = (png_sPLT_entryp)png_malloc_warn(png_ptr, |
| 939 (png_uint_32)(from->nentries * png_sizeof(png_sPLT_entry))); |
| 940 if (to->entries == NULL) |
| 941 { |
| 942 png_warning(png_ptr, |
| 943 "Out of memory while processing sPLT chunk"); |
| 944 png_free(png_ptr, to->name); |
| 945 to->name = NULL; |
| 946 continue; |
| 947 } |
| 948 png_memcpy(to->entries, from->entries, |
| 949 from->nentries * png_sizeof(png_sPLT_entry)); |
| 950 to->nentries = from->nentries; |
| 951 to->depth = from->depth; |
| 952 } |
| 953 |
1003 info_ptr->splt_palettes = np; | 954 info_ptr->splt_palettes = np; |
| 955 info_ptr->splt_palettes_num += nentries; |
| 956 info_ptr->valid |= PNG_INFO_sPLT; |
| 957 #ifdef PNG_FREE_ME_SUPPORTED |
1004 info_ptr->free_me |= PNG_FREE_SPLT; | 958 info_ptr->free_me |= PNG_FREE_SPLT; |
1005 | 959 #endif |
1006 np += info_ptr->splt_palettes_num; | |
1007 | |
1008 do | |
1009 { | |
1010 png_size_t length; | |
1011 | |
1012 /* Skip invalid input entries */ | |
1013 if (entries->name == NULL || entries->entries == NULL) | |
1014 { | |
1015 /* png_handle_sPLT doesn't do this, so this is an app error */ | |
1016 png_app_error(png_ptr, "png_set_sPLT: invalid sPLT"); | |
1017 /* Just skip the invalid entry */ | |
1018 continue; | |
1019 } | |
1020 | |
1021 np->depth = entries->depth; | |
1022 | |
1023 /* In the even of out-of-memory just return - there's no point keeping on | |
1024 * trying to add sPLT chunks. | |
1025 */ | |
1026 length = strlen(entries->name) + 1; | |
1027 np->name = png_voidcast(png_charp, png_malloc_base(png_ptr, length)); | |
1028 | |
1029 if (np->name == NULL) | |
1030 break; | |
1031 | |
1032 memcpy(np->name, entries->name, length); | |
1033 | |
1034 /* IMPORTANT: we have memory now that won't get freed if something else | |
1035 * goes wrong, this code must free it. png_malloc_array produces no | |
1036 * warnings, use a png_chunk_report (below) if there is an error. | |
1037 */ | |
1038 np->entries = png_voidcast(png_sPLT_entryp, png_malloc_array(png_ptr, | |
1039 entries->nentries, sizeof (png_sPLT_entry))); | |
1040 | |
1041 if (np->entries == NULL) | |
1042 { | |
1043 png_free(png_ptr, np->name); | |
1044 break; | |
1045 } | |
1046 | |
1047 np->nentries = entries->nentries; | |
1048 /* This multiply can't overflow because png_malloc_array has already | |
1049 * checked it when doing the allocation. | |
1050 */ | |
1051 memcpy(np->entries, entries->entries, | |
1052 entries->nentries * sizeof (png_sPLT_entry)); | |
1053 | |
1054 /* Note that 'continue' skips the advance of the out pointer and out | |
1055 * count, so an invalid entry is not added. | |
1056 */ | |
1057 info_ptr->valid |= PNG_INFO_sPLT; | |
1058 ++(info_ptr->splt_palettes_num); | |
1059 ++np; | |
1060 } | |
1061 while (++entries, --nentries); | |
1062 | |
1063 if (nentries > 0) | |
1064 png_chunk_report(png_ptr, "sPLT out of memory", PNG_CHUNK_WRITE_ERROR); | |
1065 } | 960 } |
1066 #endif /* PNG_sPLT_SUPPORTED */ | 961 #endif /* PNG_sPLT_SUPPORTED */ |
1067 | 962 |
1068 #ifdef PNG_STORE_UNKNOWN_CHUNKS_SUPPORTED | 963 #ifdef PNG_UNKNOWN_CHUNKS_SUPPORTED |
1069 static png_byte | 964 void PNGAPI |
1070 check_location(png_const_structrp png_ptr, int location) | 965 png_set_unknown_chunks(png_structp png_ptr, |
1071 { | 966 png_infop info_ptr, png_unknown_chunkp unknowns, int num_unknowns) |
1072 location &= (PNG_HAVE_IHDR|PNG_HAVE_PLTE|PNG_AFTER_IDAT); | |
1073 | |
1074 /* New in 1.6.0; copy the location and check it. This is an API | |
1075 * change, previously the app had to use the | |
1076 * png_set_unknown_chunk_location API below for each chunk. | |
1077 */ | |
1078 if (location == 0 && !(png_ptr->mode & PNG_IS_READ_STRUCT)) | |
1079 { | |
1080 /* Write struct, so unknown chunks come from the app */ | |
1081 png_app_warning(png_ptr, | |
1082 "png_set_unknown_chunks now expects a valid location"); | |
1083 /* Use the old behavior */ | |
1084 location = (png_byte)(png_ptr->mode & | |
1085 (PNG_HAVE_IHDR|PNG_HAVE_PLTE|PNG_AFTER_IDAT)); | |
1086 } | |
1087 | |
1088 /* This need not be an internal error - if the app calls | |
1089 * png_set_unknown_chunks on a read pointer it must get the location right. | |
1090 */ | |
1091 if (location == 0) | |
1092 png_error(png_ptr, "invalid location in png_set_unknown_chunks"); | |
1093 | |
1094 /* Now reduce the location to the top-most set bit by removing each least | |
1095 * significant bit in turn. | |
1096 */ | |
1097 while (location != (location & -location)) | |
1098 location &= ~(location & -location); | |
1099 | |
1100 /* The cast is safe because 'location' is a bit mask and only the low four | |
1101 * bits are significant. | |
1102 */ | |
1103 return (png_byte)location; | |
1104 } | |
1105 | |
1106 void PNGAPI | |
1107 png_set_unknown_chunks(png_const_structrp png_ptr, | |
1108 png_inforp info_ptr, png_const_unknown_chunkp unknowns, int num_unknowns) | |
1109 { | 967 { |
1110 png_unknown_chunkp np; | 968 png_unknown_chunkp np; |
1111 | 969 int i; |
1112 if (png_ptr == NULL || info_ptr == NULL || num_unknowns <= 0 || | 970 |
1113 unknowns == NULL) | 971 if (png_ptr == NULL || info_ptr == NULL || num_unknowns == 0) |
1114 return; | 972 return; |
1115 | 973 |
1116 /* Check for the failure cases where support has been disabled at compile | 974 np = (png_unknown_chunkp)png_malloc_warn(png_ptr, |
1117 * time. This code is hardly ever compiled - it's here because | 975 (png_uint_32)((info_ptr->unknown_chunks_num + num_unknowns) * |
1118 * STORE_UNKNOWN_CHUNKS is set by both read and write code (compiling in this | 976 png_sizeof(png_unknown_chunk))); |
1119 * code) but may be meaningless if the read or write handling of unknown | |
1120 * chunks is not compiled in. | |
1121 */ | |
1122 # if !defined(PNG_READ_UNKNOWN_CHUNKS_SUPPORTED) && \ | |
1123 defined(PNG_READ_SUPPORTED) | |
1124 if (png_ptr->mode & PNG_IS_READ_STRUCT) | |
1125 { | |
1126 png_app_error(png_ptr, "no unknown chunk support on read"); | |
1127 return; | |
1128 } | |
1129 # endif | |
1130 # if !defined(PNG_WRITE_UNKNOWN_CHUNKS_SUPPORTED) && \ | |
1131 defined(PNG_WRITE_SUPPORTED) | |
1132 if (!(png_ptr->mode & PNG_IS_READ_STRUCT)) | |
1133 { | |
1134 png_app_error(png_ptr, "no unknown chunk support on write"); | |
1135 return; | |
1136 } | |
1137 # endif | |
1138 | |
1139 /* Prior to 1.6.0 this code used png_malloc_warn; however, this meant that | |
1140 * unknown critical chunks could be lost with just a warning resulting in | |
1141 * undefined behavior. Now png_chunk_report is used to provide behavior | |
1142 * appropriate to read or write. | |
1143 */ | |
1144 np = png_voidcast(png_unknown_chunkp, png_realloc_array(png_ptr, | |
1145 info_ptr->unknown_chunks, info_ptr->unknown_chunks_num, num_unknowns, | |
1146 sizeof *np)); | |
1147 | |
1148 if (np == NULL) | 977 if (np == NULL) |
1149 { | 978 { |
1150 png_chunk_report(png_ptr, "too many unknown chunks", | 979 png_warning(png_ptr, |
1151 PNG_CHUNK_WRITE_ERROR); | 980 "Out of memory while processing unknown chunk."); |
1152 return; | 981 return; |
1153 } | 982 } |
1154 | 983 |
| 984 png_memcpy(np, info_ptr->unknown_chunks, |
| 985 info_ptr->unknown_chunks_num * png_sizeof(png_unknown_chunk)); |
1155 png_free(png_ptr, info_ptr->unknown_chunks); | 986 png_free(png_ptr, info_ptr->unknown_chunks); |
1156 info_ptr->unknown_chunks = np; /* safe because it is initialized */ | 987 info_ptr->unknown_chunks = NULL; |
| 988 |
| 989 for (i = 0; i < num_unknowns; i++) |
| 990 { |
| 991 png_unknown_chunkp to = np + info_ptr->unknown_chunks_num + i; |
| 992 png_unknown_chunkp from = unknowns + i; |
| 993 |
| 994 png_memcpy((png_charp)to->name, (png_charp)from->name, |
| 995 png_sizeof(from->name)); |
| 996 to->name[png_sizeof(to->name)-1] = '\0'; |
| 997 to->size = from->size; |
| 998 /* Note our location in the read or write sequence */ |
| 999 to->location = (png_byte)(png_ptr->mode & 0xff); |
| 1000 |
| 1001 if (from->size == 0) |
| 1002 to->data=NULL; |
| 1003 else |
| 1004 { |
| 1005 to->data = (png_bytep)png_malloc_warn(png_ptr, |
| 1006 (png_uint_32)from->size); |
| 1007 if (to->data == NULL) |
| 1008 { |
| 1009 png_warning(png_ptr, |
| 1010 "Out of memory while processing unknown chunk."); |
| 1011 to->size = 0; |
| 1012 } |
| 1013 else |
| 1014 png_memcpy(to->data, from->data, from->size); |
| 1015 } |
| 1016 } |
| 1017 |
| 1018 info_ptr->unknown_chunks = np; |
| 1019 info_ptr->unknown_chunks_num += num_unknowns; |
| 1020 #ifdef PNG_FREE_ME_SUPPORTED |
1157 info_ptr->free_me |= PNG_FREE_UNKN; | 1021 info_ptr->free_me |= PNG_FREE_UNKN; |
1158 | 1022 #endif |
1159 np += info_ptr->unknown_chunks_num; | 1023 } |
1160 | 1024 void PNGAPI |
1161 /* Increment unknown_chunks_num each time round the loop to protect the | 1025 png_set_unknown_chunk_location(png_structp png_ptr, png_infop info_ptr, |
1162 * just-allocated chunk data. | 1026 int chunk, int location) |
1163 */ | 1027 { |
1164 for (; num_unknowns > 0; --num_unknowns, ++unknowns) | 1028 if (png_ptr != NULL && info_ptr != NULL && chunk >= 0 && chunk < |
1165 { | 1029 (int)info_ptr->unknown_chunks_num) |
1166 memcpy(np->name, unknowns->name, (sizeof np->name)); | 1030 info_ptr->unknown_chunks[chunk].location = (png_byte)location; |
1167 np->name[(sizeof np->name)-1] = '\0'; | 1031 } |
1168 np->location = check_location(png_ptr, unknowns->location); | 1032 #endif |
1169 | 1033 |
1170 if (unknowns->size == 0) | 1034 #if defined(PNG_1_0_X) || defined(PNG_1_2_X) |
1171 { | 1035 #if defined(PNG_READ_EMPTY_PLTE_SUPPORTED) || \ |
1172 np->data = NULL; | 1036 defined(PNG_WRITE_EMPTY_PLTE_SUPPORTED) |
1173 np->size = 0; | 1037 void PNGAPI |
1174 } | 1038 png_permit_empty_plte (png_structp png_ptr, int empty_plte_permitted) |
1175 | 1039 { |
1176 else | 1040 /* This function is deprecated in favor of png_permit_mng_features() |
1177 { | 1041 and will be removed from libpng-1.3.0 */ |
1178 np->data = png_voidcast(png_bytep, | 1042 |
1179 png_malloc_base(png_ptr, unknowns->size)); | 1043 png_debug(1, "in png_permit_empty_plte, DEPRECATED."); |
1180 | 1044 |
1181 if (np->data == NULL) | 1045 if (png_ptr == NULL) |
1182 { | 1046 return; |
1183 png_chunk_report(png_ptr, "unknown chunk: out of memory", | 1047 png_ptr->mng_features_permitted = (png_byte) |
1184 PNG_CHUNK_WRITE_ERROR); | 1048 ((png_ptr->mng_features_permitted & (~PNG_FLAG_MNG_EMPTY_PLTE)) | |
1185 /* But just skip storing the unknown chunk */ | 1049 ((empty_plte_permitted & PNG_FLAG_MNG_EMPTY_PLTE))); |
1186 continue; | 1050 } |
1187 } | 1051 #endif |
1188 | 1052 #endif |
1189 memcpy(np->data, unknowns->data, unknowns->size); | |
1190 np->size = unknowns->size; | |
1191 } | |
1192 | |
1193 /* These increments are skipped on out-of-memory for the data - the | |
1194 * unknown chunk entry gets overwritten if the png_chunk_report returns. | |
1195 * This is correct in the read case (the chunk is just dropped.) | |
1196 */ | |
1197 ++np; | |
1198 ++(info_ptr->unknown_chunks_num); | |
1199 } | |
1200 } | |
1201 | |
1202 void PNGAPI | |
1203 png_set_unknown_chunk_location(png_const_structrp png_ptr, png_inforp info_ptr, | |
1204 int chunk, int location) | |
1205 { | |
1206 /* This API is pretty pointless in 1.6.0 because the location can be set | |
1207 * before the call to png_set_unknown_chunks. | |
1208 * | |
1209 * TODO: add a png_app_warning in 1.7 | |
1210 */ | |
1211 if (png_ptr != NULL && info_ptr != NULL && chunk >= 0 && | |
1212 chunk < info_ptr->unknown_chunks_num) | |
1213 { | |
1214 if ((location & (PNG_HAVE_IHDR|PNG_HAVE_PLTE|PNG_AFTER_IDAT)) == 0) | |
1215 { | |
1216 png_app_error(png_ptr, "invalid unknown chunk location"); | |
1217 /* Fake out the pre 1.6.0 behavior: */ | |
1218 if ((location & PNG_HAVE_IDAT)) /* undocumented! */ | |
1219 location = PNG_AFTER_IDAT; | |
1220 | |
1221 else | |
1222 location = PNG_HAVE_IHDR; /* also undocumented */ | |
1223 } | |
1224 | |
1225 info_ptr->unknown_chunks[chunk].location = | |
1226 check_location(png_ptr, location); | |
1227 } | |
1228 } | |
1229 #endif | |
1230 | |
1231 | 1053 |
1232 #ifdef PNG_MNG_FEATURES_SUPPORTED | 1054 #ifdef PNG_MNG_FEATURES_SUPPORTED |
1233 png_uint_32 PNGAPI | 1055 png_uint_32 PNGAPI |
1234 png_permit_mng_features (png_structrp png_ptr, png_uint_32 mng_features) | 1056 png_permit_mng_features (png_structp png_ptr, png_uint_32 mng_features) |
1235 { | 1057 { |
1236 png_debug(1, "in png_permit_mng_features"); | 1058 png_debug(1, "in png_permit_mng_features"); |
1237 | 1059 |
1238 if (png_ptr == NULL) | 1060 if (png_ptr == NULL) |
1239 return 0; | 1061 return (png_uint_32)0; |
1240 | 1062 png_ptr->mng_features_permitted = |
1241 png_ptr->mng_features_permitted = mng_features & PNG_ALL_MNG_FEATURES; | 1063 (png_byte)(mng_features & PNG_ALL_MNG_FEATURES); |
1242 | 1064 return (png_uint_32)png_ptr->mng_features_permitted; |
1243 return png_ptr->mng_features_permitted; | |
1244 } | 1065 } |
1245 #endif | 1066 #endif |
1246 | 1067 |
1247 #ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED | 1068 #ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED |
1248 static unsigned int | 1069 void PNGAPI |
1249 add_one_chunk(png_bytep list, unsigned int count, png_const_bytep add, int keep) | 1070 png_set_keep_unknown_chunks(png_structp png_ptr, int keep, png_bytep |
1250 { | 1071 chunk_list, int num_chunks) |
1251 unsigned int i; | 1072 { |
1252 | 1073 png_bytep new_list, p; |
1253 /* Utility function: update the 'keep' state of a chunk if it is already in | 1074 int i, old_num_chunks; |
1254 * the list, otherwise add it to the list. | |
1255 */ | |
1256 for (i=0; i<count; ++i, list += 5) if (memcmp(list, add, 4) == 0) | |
1257 { | |
1258 list[4] = (png_byte)keep; | |
1259 return count; | |
1260 } | |
1261 | |
1262 if (keep != PNG_HANDLE_CHUNK_AS_DEFAULT) | |
1263 { | |
1264 ++count; | |
1265 memcpy(list, add, 4); | |
1266 list[4] = (png_byte)keep; | |
1267 } | |
1268 | |
1269 return count; | |
1270 } | |
1271 | |
1272 void PNGAPI | |
1273 png_set_keep_unknown_chunks(png_structrp png_ptr, int keep, | |
1274 png_const_bytep chunk_list, int num_chunks_in) | |
1275 { | |
1276 png_bytep new_list; | |
1277 unsigned int num_chunks, old_num_chunks; | |
1278 | |
1279 if (png_ptr == NULL) | 1075 if (png_ptr == NULL) |
1280 return; | 1076 return; |
1281 | 1077 if (num_chunks == 0) |
1282 if (keep < 0 || keep >= PNG_HANDLE_CHUNK_LAST) | 1078 { |
1283 { | 1079 if (keep == PNG_HANDLE_CHUNK_ALWAYS || keep == PNG_HANDLE_CHUNK_IF_SAFE) |
1284 png_app_error(png_ptr, "png_set_keep_unknown_chunks: invalid keep"); | 1080 png_ptr->flags |= PNG_FLAG_KEEP_UNKNOWN_CHUNKS; |
1285 return; | 1081 else |
1286 } | 1082 png_ptr->flags &= ~PNG_FLAG_KEEP_UNKNOWN_CHUNKS; |
1287 | 1083 |
1288 if (num_chunks_in <= 0) | 1084 if (keep == PNG_HANDLE_CHUNK_ALWAYS) |
1289 { | 1085 png_ptr->flags |= PNG_FLAG_KEEP_UNSAFE_CHUNKS; |
1290 png_ptr->unknown_default = keep; | 1086 else |
1291 | 1087 png_ptr->flags &= ~PNG_FLAG_KEEP_UNSAFE_CHUNKS; |
1292 /* '0' means just set the flags, so stop here */ | 1088 return; |
1293 if (num_chunks_in == 0) | 1089 } |
1294 return; | 1090 if (chunk_list == NULL) |
1295 } | 1091 return; |
1296 | |
1297 if (num_chunks_in < 0) | |
1298 { | |
1299 /* Ignore all unknown chunks and all chunks recognized by | |
1300 * libpng except for IHDR, PLTE, tRNS, IDAT, and IEND | |
1301 */ | |
1302 static PNG_CONST png_byte chunks_to_ignore[] = { | |
1303 98, 75, 71, 68, '\0', /* bKGD */ | |
1304 99, 72, 82, 77, '\0', /* cHRM */ | |
1305 103, 65, 77, 65, '\0', /* gAMA */ | |
1306 104, 73, 83, 84, '\0', /* hIST */ | |
1307 105, 67, 67, 80, '\0', /* iCCP */ | |
1308 105, 84, 88, 116, '\0', /* iTXt */ | |
1309 111, 70, 70, 115, '\0', /* oFFs */ | |
1310 112, 67, 65, 76, '\0', /* pCAL */ | |
1311 112, 72, 89, 115, '\0', /* pHYs */ | |
1312 115, 66, 73, 84, '\0', /* sBIT */ | |
1313 115, 67, 65, 76, '\0', /* sCAL */ | |
1314 115, 80, 76, 84, '\0', /* sPLT */ | |
1315 115, 84, 69, 82, '\0', /* sTER */ | |
1316 115, 82, 71, 66, '\0', /* sRGB */ | |
1317 116, 69, 88, 116, '\0', /* tEXt */ | |
1318 116, 73, 77, 69, '\0', /* tIME */ | |
1319 122, 84, 88, 116, '\0' /* zTXt */ | |
1320 }; | |
1321 | |
1322 chunk_list = chunks_to_ignore; | |
1323 num_chunks = (sizeof chunks_to_ignore)/5; | |
1324 } | |
1325 | |
1326 else /* num_chunks_in > 0 */ | |
1327 { | |
1328 if (chunk_list == NULL) | |
1329 { | |
1330 /* Prior to 1.6.0 this was silently ignored, now it is an app_error | |
1331 * which can be switched off. | |
1332 */ | |
1333 png_app_error(png_ptr, "png_set_keep_unknown_chunks: no chunk list"); | |
1334 return; | |
1335 } | |
1336 | |
1337 num_chunks = num_chunks_in; | |
1338 } | |
1339 | |
1340 old_num_chunks = png_ptr->num_chunk_list; | 1092 old_num_chunks = png_ptr->num_chunk_list; |
1341 if (png_ptr->chunk_list == NULL) | 1093 new_list=(png_bytep)png_malloc(png_ptr, |
1342 old_num_chunks = 0; | 1094 (png_uint_32) |
1343 | 1095 (5*(num_chunks + old_num_chunks))); |
1344 /* Since num_chunks is always restricted to UINT_MAX/5 this can't overflow. | 1096 if (png_ptr->chunk_list != NULL) |
1345 */ | 1097 { |
1346 if (num_chunks + old_num_chunks > UINT_MAX/5) | 1098 png_memcpy(new_list, png_ptr->chunk_list, |
1347 { | 1099 (png_size_t)(5*old_num_chunks)); |
1348 png_app_error(png_ptr, "png_set_keep_unknown_chunks: too many chunks"); | 1100 png_free(png_ptr, png_ptr->chunk_list); |
1349 return; | 1101 png_ptr->chunk_list=NULL; |
1350 } | 1102 } |
1351 | 1103 png_memcpy(new_list + 5*old_num_chunks, chunk_list, |
1352 /* If these chunks are being reset to the default then no more memory is | 1104 (png_size_t)(5*num_chunks)); |
1353 * required because add_one_chunk above doesn't extend the list if the 'keep' | 1105 for (p = new_list + 5*old_num_chunks + 4, i = 0; i<num_chunks; i++, p += 5) |
1354 * parameter is the default. | 1106 *p=(png_byte)keep; |
1355 */ | 1107 png_ptr->num_chunk_list = old_num_chunks + num_chunks; |
1356 if (keep) | 1108 png_ptr->chunk_list = new_list; |
1357 { | 1109 #ifdef PNG_FREE_ME_SUPPORTED |
1358 new_list = png_voidcast(png_bytep, png_malloc(png_ptr, | 1110 png_ptr->free_me |= PNG_FREE_LIST; |
1359 5 * (num_chunks + old_num_chunks))); | 1111 #endif |
1360 | |
1361 if (old_num_chunks > 0) | |
1362 memcpy(new_list, png_ptr->chunk_list, 5*old_num_chunks); | |
1363 } | |
1364 | |
1365 else if (old_num_chunks > 0) | |
1366 new_list = png_ptr->chunk_list; | |
1367 | |
1368 else | |
1369 new_list = NULL; | |
1370 | |
1371 /* Add the new chunks together with each one's handling code. If the chunk | |
1372 * already exists the code is updated, otherwise the chunk is added to the | |
1373 * end. (In libpng 1.6.0 order no longer matters because this code enforces | |
1374 * the earlier convention that the last setting is the one that is used.) | |
1375 */ | |
1376 if (new_list != NULL) | |
1377 { | |
1378 png_const_bytep inlist; | |
1379 png_bytep outlist; | |
1380 unsigned int i; | |
1381 | |
1382 for (i=0; i<num_chunks; ++i) | |
1383 old_num_chunks = add_one_chunk(new_list, old_num_chunks, | |
1384 chunk_list+5*i, keep); | |
1385 | |
1386 /* Now remove any spurious 'default' entries. */ | |
1387 num_chunks = 0; | |
1388 for (i=0, inlist=outlist=new_list; i<old_num_chunks; ++i, inlist += 5) | |
1389 if (inlist[4]) | |
1390 { | |
1391 if (outlist != inlist) | |
1392 memcpy(outlist, inlist, 5); | |
1393 outlist += 5; | |
1394 ++num_chunks; | |
1395 } | |
1396 | |
1397 /* This means the application has removed all the specialized handling. */ | |
1398 if (num_chunks == 0) | |
1399 { | |
1400 if (png_ptr->chunk_list != new_list) | |
1401 png_free(png_ptr, new_list); | |
1402 | |
1403 new_list = NULL; | |
1404 } | |
1405 } | |
1406 | |
1407 else | |
1408 num_chunks = 0; | |
1409 | |
1410 png_ptr->num_chunk_list = num_chunks; | |
1411 | |
1412 if (png_ptr->chunk_list != new_list) | |
1413 { | |
1414 if (png_ptr->chunk_list != NULL) | |
1415 png_free(png_ptr, png_ptr->chunk_list); | |
1416 | |
1417 png_ptr->chunk_list = new_list; | |
1418 } | |
1419 } | 1112 } |
1420 #endif | 1113 #endif |
1421 | 1114 |
1422 #ifdef PNG_READ_USER_CHUNKS_SUPPORTED | 1115 #ifdef PNG_READ_USER_CHUNKS_SUPPORTED |
1423 void PNGAPI | 1116 void PNGAPI |
1424 png_set_read_user_chunk_fn(png_structrp png_ptr, png_voidp user_chunk_ptr, | 1117 png_set_read_user_chunk_fn(png_structp png_ptr, png_voidp user_chunk_ptr, |
1425 png_user_chunk_ptr read_user_chunk_fn) | 1118 png_user_chunk_ptr read_user_chunk_fn) |
1426 { | 1119 { |
1427 png_debug(1, "in png_set_read_user_chunk_fn"); | 1120 png_debug(1, "in png_set_read_user_chunk_fn"); |
1428 | 1121 |
1429 if (png_ptr == NULL) | 1122 if (png_ptr == NULL) |
1430 return; | 1123 return; |
1431 | 1124 |
1432 png_ptr->read_user_chunk_fn = read_user_chunk_fn; | 1125 png_ptr->read_user_chunk_fn = read_user_chunk_fn; |
1433 png_ptr->user_chunk_ptr = user_chunk_ptr; | 1126 png_ptr->user_chunk_ptr = user_chunk_ptr; |
1434 } | 1127 } |
1435 #endif | 1128 #endif |
1436 | 1129 |
1437 #ifdef PNG_INFO_IMAGE_SUPPORTED | 1130 #ifdef PNG_INFO_IMAGE_SUPPORTED |
1438 void PNGAPI | 1131 void PNGAPI |
1439 png_set_rows(png_const_structrp png_ptr, png_inforp info_ptr, | 1132 png_set_rows(png_structp png_ptr, png_infop info_ptr, png_bytepp row_pointers) |
1440 png_bytepp row_pointers) | |
1441 { | 1133 { |
1442 png_debug1(1, "in %s storage function", "rows"); | 1134 png_debug1(1, "in %s storage function", "rows"); |
1443 | 1135 |
1444 if (png_ptr == NULL || info_ptr == NULL) | 1136 if (png_ptr == NULL || info_ptr == NULL) |
1445 return; | 1137 return; |
1446 | 1138 |
1447 if (info_ptr->row_pointers && (info_ptr->row_pointers != row_pointers)) | 1139 if (info_ptr->row_pointers && (info_ptr->row_pointers != row_pointers)) |
1448 png_free_data(png_ptr, info_ptr, PNG_FREE_ROWS, 0); | 1140 png_free_data(png_ptr, info_ptr, PNG_FREE_ROWS, 0); |
1449 | |
1450 info_ptr->row_pointers = row_pointers; | 1141 info_ptr->row_pointers = row_pointers; |
1451 | |
1452 if (row_pointers) | 1142 if (row_pointers) |
1453 info_ptr->valid |= PNG_INFO_IDAT; | 1143 info_ptr->valid |= PNG_INFO_IDAT; |
1454 } | 1144 } |
1455 #endif | 1145 #endif |
1456 | 1146 |
1457 void PNGAPI | 1147 void PNGAPI |
1458 png_set_compression_buffer_size(png_structrp png_ptr, png_size_t size) | 1148 png_set_compression_buffer_size(png_structp png_ptr, |
| 1149 png_uint_32 size) |
1459 { | 1150 { |
1460 if (png_ptr == NULL) | 1151 if (png_ptr == NULL) |
1461 return; | 1152 return; |
1462 | 1153 png_free(png_ptr, png_ptr->zbuf); |
1463 if (size == 0 || size > PNG_UINT_31_MAX) | 1154 png_ptr->zbuf_size = (png_size_t)size; |
1464 png_error(png_ptr, "invalid compression buffer size"); | 1155 png_ptr->zbuf = (png_bytep)png_malloc(png_ptr, size); |
1465 | 1156 png_ptr->zstream.next_out = png_ptr->zbuf; |
1466 # ifdef PNG_SEQUENTIAL_READ_SUPPORTED | 1157 png_ptr->zstream.avail_out = (uInt)png_ptr->zbuf_size; |
1467 if (png_ptr->mode & PNG_IS_READ_STRUCT) | |
1468 { | |
1469 png_ptr->IDAT_read_size = (png_uint_32)size; /* checked above */ | |
1470 return; | |
1471 } | |
1472 # endif | |
1473 | |
1474 # ifdef PNG_WRITE_SUPPORTED | |
1475 if (!(png_ptr->mode & PNG_IS_READ_STRUCT)) | |
1476 { | |
1477 if (png_ptr->zowner != 0) | |
1478 { | |
1479 png_warning(png_ptr, | |
1480 "Compression buffer size cannot be changed because it is in use"); | |
1481 return; | |
1482 } | |
1483 | |
1484 if (size > ZLIB_IO_MAX) | |
1485 { | |
1486 png_warning(png_ptr, | |
1487 "Compression buffer size limited to system maximum"); | |
1488 size = ZLIB_IO_MAX; /* must fit */ | |
1489 } | |
1490 | |
1491 else if (size < 6) | |
1492 { | |
1493 /* Deflate will potentially go into an infinite loop on a SYNC_FLUSH | |
1494 * if this is permitted. | |
1495 */ | |
1496 png_warning(png_ptr, | |
1497 "Compression buffer size cannot be reduced below 6"); | |
1498 return; | |
1499 } | |
1500 | |
1501 if (png_ptr->zbuffer_size != size) | |
1502 { | |
1503 png_free_buffer_list(png_ptr, &png_ptr->zbuffer_list); | |
1504 png_ptr->zbuffer_size = (uInt)size; | |
1505 } | |
1506 } | |
1507 # endif | |
1508 } | 1158 } |
1509 | 1159 |
1510 void PNGAPI | 1160 void PNGAPI |
1511 png_set_invalid(png_const_structrp png_ptr, png_inforp info_ptr, int mask) | 1161 png_set_invalid(png_structp png_ptr, png_infop info_ptr, int mask) |
1512 { | 1162 { |
1513 if (png_ptr && info_ptr) | 1163 if (png_ptr && info_ptr) |
1514 info_ptr->valid &= ~mask; | 1164 info_ptr->valid &= ~mask; |
1515 } | 1165 } |
1516 | 1166 |
1517 | 1167 |
| 1168 #ifndef PNG_1_0_X |
| 1169 #ifdef PNG_ASSEMBLER_CODE_SUPPORTED |
| 1170 /* Function was added to libpng 1.2.0 and should always exist by default */ |
| 1171 void PNGAPI |
| 1172 png_set_asm_flags (png_structp png_ptr, png_uint_32 asm_flags) |
| 1173 { |
| 1174 /* Obsolete as of libpng-1.2.20 and will be removed from libpng-1.4.0 */ |
| 1175 if (png_ptr != NULL) |
| 1176 png_ptr->asm_flags = 0; |
| 1177 asm_flags = asm_flags; /* Quiet the compiler */ |
| 1178 } |
| 1179 |
| 1180 /* This function was added to libpng 1.2.0 */ |
| 1181 void PNGAPI |
| 1182 png_set_mmx_thresholds (png_structp png_ptr, |
| 1183 png_byte mmx_bitdepth_threshold, |
| 1184 png_uint_32 mmx_rowbytes_threshold) |
| 1185 { |
| 1186 /* Obsolete as of libpng-1.2.20 and will be removed from libpng-1.4.0 */ |
| 1187 if (png_ptr == NULL) |
| 1188 return; |
| 1189 /* Quiet the compiler */ |
| 1190 mmx_bitdepth_threshold = mmx_bitdepth_threshold; |
| 1191 mmx_rowbytes_threshold = mmx_rowbytes_threshold; |
| 1192 } |
| 1193 #endif /* ?PNG_ASSEMBLER_CODE_SUPPORTED */ |
| 1194 |
1518 #ifdef PNG_SET_USER_LIMITS_SUPPORTED | 1195 #ifdef PNG_SET_USER_LIMITS_SUPPORTED |
1519 /* This function was added to libpng 1.2.6 */ | 1196 /* This function was added to libpng 1.2.6 */ |
1520 void PNGAPI | 1197 void PNGAPI |
1521 png_set_user_limits (png_structrp png_ptr, png_uint_32 user_width_max, | 1198 png_set_user_limits (png_structp png_ptr, png_uint_32 user_width_max, |
1522 png_uint_32 user_height_max) | 1199 png_uint_32 user_height_max) |
1523 { | 1200 { |
1524 /* Images with dimensions larger than these limits will be | 1201 /* Images with dimensions larger than these limits will be |
1525 * rejected by png_set_IHDR(). To accept any PNG datastream | 1202 * rejected by png_set_IHDR(). To accept any PNG datastream |
1526 * regardless of dimensions, set both limits to 0x7ffffffL. | 1203 * regardless of dimensions, set both limits to 0x7ffffffL. |
1527 */ | 1204 */ |
1528 if (png_ptr == NULL) | 1205 if (png_ptr == NULL) |
1529 return; | 1206 return; |
1530 | |
1531 png_ptr->user_width_max = user_width_max; | 1207 png_ptr->user_width_max = user_width_max; |
1532 png_ptr->user_height_max = user_height_max; | 1208 png_ptr->user_height_max = user_height_max; |
1533 } | 1209 } |
1534 | |
1535 /* This function was added to libpng 1.4.0 */ | |
1536 void PNGAPI | |
1537 png_set_chunk_cache_max (png_structrp png_ptr, png_uint_32 user_chunk_cache_max) | |
1538 { | |
1539 if (png_ptr) | |
1540 png_ptr->user_chunk_cache_max = user_chunk_cache_max; | |
1541 } | |
1542 | |
1543 /* This function was added to libpng 1.4.1 */ | |
1544 void PNGAPI | |
1545 png_set_chunk_malloc_max (png_structrp png_ptr, | |
1546 png_alloc_size_t user_chunk_malloc_max) | |
1547 { | |
1548 if (png_ptr) | |
1549 png_ptr->user_chunk_malloc_max = user_chunk_malloc_max; | |
1550 } | |
1551 #endif /* ?PNG_SET_USER_LIMITS_SUPPORTED */ | 1210 #endif /* ?PNG_SET_USER_LIMITS_SUPPORTED */ |
1552 | 1211 |
1553 | 1212 |
1554 #ifdef PNG_BENIGN_ERRORS_SUPPORTED | 1213 #ifdef PNG_BENIGN_ERRORS_SUPPORTED |
1555 void PNGAPI | 1214 void PNGAPI |
1556 png_set_benign_errors(png_structrp png_ptr, int allowed) | 1215 png_set_benign_errors(png_structp png_ptr, int allowed) |
1557 { | 1216 { |
1558 png_debug(1, "in png_set_benign_errors"); | 1217 png_debug(1, "in png_set_benign_errors"); |
1559 | 1218 |
1560 /* If allowed is 1, png_benign_error() is treated as a warning. | |
1561 * | |
1562 * If allowed is 0, png_benign_error() is treated as an error (which | |
1563 * is the default behavior if png_set_benign_errors() is not called). | |
1564 */ | |
1565 | |
1566 if (allowed) | 1219 if (allowed) |
1567 png_ptr->flags |= PNG_FLAG_BENIGN_ERRORS_WARN | | 1220 png_ptr->flags |= PNG_FLAG_BENIGN_ERRORS_WARN; |
1568 PNG_FLAG_APP_WARNINGS_WARN | PNG_FLAG_APP_ERRORS_WARN; | |
1569 | |
1570 else | 1221 else |
1571 png_ptr->flags &= ~(PNG_FLAG_BENIGN_ERRORS_WARN | | 1222 png_ptr->flags &= ~PNG_FLAG_BENIGN_ERRORS_WARN; |
1572 PNG_FLAG_APP_WARNINGS_WARN | PNG_FLAG_APP_ERRORS_WARN); | |
1573 } | 1223 } |
1574 #endif /* PNG_BENIGN_ERRORS_SUPPORTED */ | 1224 #endif /* PNG_BENIGN_ERRORS_SUPPORTED */ |
1575 | 1225 #endif /* ?PNG_1_0_X */ |
1576 #ifdef PNG_CHECK_FOR_INVALID_INDEX_SUPPORTED | |
1577 /* Whether to report invalid palette index; added at libng-1.5.10. | |
1578 * It is possible for an indexed (color-type==3) PNG file to contain | |
1579 * pixels with invalid (out-of-range) indexes if the PLTE chunk has | |
1580 * fewer entries than the image's bit-depth would allow. We recover | |
1581 * from this gracefully by filling any incomplete palette with zeroes | |
1582 * (opaque black). By default, when this occurs libpng will issue | |
1583 * a benign error. This API can be used to override that behavior. | |
1584 */ | |
1585 void PNGAPI | |
1586 png_set_check_for_invalid_index(png_structrp png_ptr, int allowed) | |
1587 { | |
1588 png_debug(1, "in png_set_check_for_invalid_index"); | |
1589 | |
1590 if (allowed > 0) | |
1591 png_ptr->num_palette_max = 0; | |
1592 | |
1593 else | |
1594 png_ptr->num_palette_max = -1; | |
1595 } | |
1596 #endif | |
1597 #endif /* PNG_READ_SUPPORTED || PNG_WRITE_SUPPORTED */ | 1226 #endif /* PNG_READ_SUPPORTED || PNG_WRITE_SUPPORTED */ |
OLD | NEW |