id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
7369	Update to libpng-1.6.21 and replace apng patch	Fernando de Oliveira	Fernando de Oliveira	"[http://downloads.sourceforge.net/libpng/libpng-1.6.21.tar.xz]

[http://downloads.sourceforge.net/libpng/libpng-1.6.21.tar.xz.asc]
New patch to be used replacing the old one:

[http://downloads.sourceforge.net/project/apng/libpng/libpng16/libpng-1.6.21-apng.patch.gz]

[http://sourceforge.net/p/png-mng/mailman/png-mng-announce/?viewmonth=201601]

or

[http://sourceforge.net/p/png-mng/mailman/message/34770176/]

{{{
[png-mng-announce] libpng-1.6.21 is available
From: Glenn Randers-Pehrson <glennrp@gm...> - 2016-01-15 20:35:15
Attachments: Message as HTML    

...

Changes since the last public release (1.6.20):

• Fixed syntax ""$(command)"" in tests/pngstest that some shells other
  than bash could not parse (Bug report by Nelson Beebe). Use `command`
  instead.
• Moved png_check_keyword() from pngwutil.c to pngset.c
• Removed LE/BE dependencies in pngvalid, to 'fix' the current problem
  in the BigEndian tests by not testing it, making the BE code the same
  as the LE version.
• Fixes to pngvalid for various reduced build configurations (eliminate
  unused statics) and a fix for the case in rgb_to_gray when the
  digitize option reduces graylo to 0, producing a large error.
• Widened the 'limit' check on the internally calculated error limits in
  the 'DIGITIZE' case (the code used prior to 1.7 for rgb_to_gray error
  checks) and changed the check to only operate in non-release builds
  (base build type not RC or RELEASE.)
• Fixed undefined behavior in pngvalid.c, undefined because (png_byte)
  << shift is undefined if it changes the signed bit (because png_byte
  is promoted to int). The libpng exported functions png_get_uint_32 and
  png_get_uint_16 handle this. (Bug reported by David Drysdale as a
  result of reports from UBSAN in clang 3.8).
• This changes pngvalid to use BE random numbers; this used to produce
  errors but these should not be fixed as a result of the previous
  changes.
• In projects/vstudio, combined readme.txt and WARNING into README.txt
• Relocated assert() in contrib/tools/pngfix.c, bug found by American
  Fuzzy Lop, reported by Brian Carpenter.
• Marked 'limit' UNUSED in transform_range_check().  This only affects
  release builds.
• Worked around a false-positive Coverity issue in pngvalid.c.

Glenn
}}}"	enhancement	closed	normal	7.9	BOOK	SVN	medium	fixed