Google Git
Sign in
flutter / third_party / libpng / 9c0d5c77bf5bf2d7c1e11f388de40a70e0191550
commit9c0d5c77bf5bf2d7c1e11f388de40a70e0191550[log] [tgz]
authorCosmin Truta <ctruta@gmail.com>Sun Feb 03 22:40:56 2019 -0500
committerCosmin Truta <ctruta@gmail.com>Sun Feb 03 22:40:56 2019 -0500
tree72e2e0c455f684527aae176a5886ed49e8609020
parent8439534daa1d3a5705ba92e653eda9251246dd61 [diff]
Call png_image_free_function without guarding it with png_safe_execute

png_image_free_function (or any other destructor) should never fail.
Destructors need not and must not be executed under png_safe_execute.

Reference: CVE-2019-7317, use-after-free in png_image_free
1 file changed
tree: 72e2e0c455f684527aae176a5886ed49e8609020
  1. arm/
  2. contrib/
  3. intel/
  4. mips/
  5. powerpc/
  6. projects/
  7. scripts/
  8. tests/
  9. aclocal.m4
  10. ANNOUNCE
  11. AUTHORS
  12. autogen.sh
  13. CHANGES
  14. CMakeLists.txt
  15. compile
  16. config.guess
  17. config.h.in
  18. config.sub
  19. configure
  20. configure.ac
  21. depcomp
  22. example.c
  23. INSTALL
  24. install-sh
  25. libpng-config.in
  26. libpng-manual.txt
  27. libpng.3
  28. libpng.pc.in
  29. libpngpf.3
  30. LICENSE
  31. ltmain.sh
  32. Makefile.am
  33. Makefile.in
  34. missing
  35. png.5
  36. png.c
  37. png.h
  38. pngbar.jpg
  39. pngbar.png
  40. pngconf.h
  41. pngdebug.h
  42. pngerror.c
  43. pngget.c
  44. pnginfo.h
  45. pngmem.c
  46. pngnow.png
  47. pngpread.c
  48. pngpriv.h
  49. pngread.c
  50. pngrio.c
  51. pngrtran.c
  52. pngrutil.c
  53. pngset.c
  54. pngstruct.h
  55. pngtest.c
  56. pngtest.png
  57. pngtrans.c
  58. pngusr.dfa
  59. pngwio.c
  60. pngwrite.c
  61. pngwtran.c
  62. pngwutil.c
  63. README
  64. test-driver
  65. TODO
  66. TRADEMARK