[libpng15] Fix incorrect calculation of maximum number of unknown chunks or
sPLT chunks to be stored (John Bowler).
diff --git a/ANNOUNCE b/ANNOUNCE
index 6ef155d..b4cfe7e 100644
--- a/ANNOUNCE
+++ b/ANNOUNCE
@@ -1,5 +1,5 @@
-Libpng 1.5.22rc04 - March 15, 2015
+Libpng 1.5.22rc04 - March 16, 2015
This is not intended to be a public release. It will be replaced
within a few weeks by a public version or by another test version.
@@ -61,9 +61,11 @@
Updated CMakeLists.txt to add OSX framework, change YES/NO to ON/OFF
for consistency, and remove some useless tests (Alexey Petruchik).
-Version 1.5.22rc04 [March 15, 2015]
+Version 1.5.22rc04 [March 16, 2015]
Remove pnglibconf.h, pnglibconf.c, and pnglibconf.out instead of
pnglibconf.* in "make clean" (Cosmin).
+ Fix incorrect calculation of maximum number of unknown chunks or
+ sPLT chunks to be stored (John Bowler).
Send comments/corrections/commendations to png-mng-implement at lists.sf.net
(subscription required; visit
diff --git a/CHANGES b/CHANGES
index 1d4f8ea..2694d23 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4325,9 +4325,11 @@
Updated CMakeLists.txt to add OSX framework, change YES/NO to ON/OFF
for consistency, and remove some useless tests (Alexey Petruchik).
-Version 1.5.22rc04 [March 15, 2015]
+Version 1.5.22rc04 [March 16, 2015]
Remove pnglibconf.h, pnglibconf.c, and pnglibconf.out instead of
pnglibconf.* in "make clean" (Cosmin).
+ Fix incorrect calculation of maximum number of unknown chunks or
+ sPLT chunks to be stored (John Bowler).
Send comments/corrections/commendations to png-mng-implement at lists.sf.net
(subscription required; visit
diff --git a/pngset.c b/pngset.c
index 3efc085..3de1dcb 100644
--- a/pngset.c
+++ b/pngset.c
@@ -977,7 +977,7 @@
if (png_ptr == NULL || info_ptr == NULL)
return;
- element_size = PNG_SIZE_MAX/png_sizeof(png_sPLT_t);
+ element_size = png_sizeof(png_sPLT_t);
if (nentries < 0 ||
nentries > INT_MAX-info_ptr->splt_palettes_num ||
(unsigned int)/*SAFE*/(nentries +/*SAFE*/
@@ -1058,7 +1058,7 @@
if (png_ptr == NULL || info_ptr == NULL || num_unknowns == 0)
return;
- element_size = PNG_SIZE_MAX/png_sizeof(png_unknown_chunk);
+ element_size = png_sizeof(png_unknown_chunk);
if (num_unknowns < 0 ||
num_unknowns > INT_MAX-info_ptr->unknown_chunks_num ||
(unsigned int)/*SAFE*/(num_unknowns +/*SAFE*/
