tree 18d9d01f8eacad45f1e8f5790b00f69cee4b7e02
parent 66005cbae1ff19ab15c7ade1a3bd22665be2a9fc
author Ben Wagner <bungeman@chromium.org> 1615833144 -0400
committer Werner Lemberg <wl@gnu.org> 1615880865 +0100

[sfnt] Fix memory leak in png loading.

Reported as

  https://bugs.chromium.org/p/chromium/issues/detail?id=1182552

Memory is allocated and the pointer assigned to `rows` inside a
'setjmp' scope.  This memory must be freed outside the 'setjmp'
scope after a 'longjmp'.  Since `rows` is a local and modified
inside the 'setjmp' scope it must be marked volatile or it will have
an indeterminate value after the 'longjmp'.

* src/sfnt/pngshim.c (Load_SBit_Png): Fix memory leak of `rows`.