Libpng 1.4.17beta03 - October 23, 2015 This is not intended to be a public release. It will be replaced within a few weeks by a public version or by another test version. Files available for download: Source files with LF line endings (for Unix/Linux) and with a "configure" script 1.4.17beta03.tar.xz (LZMA-compressed, recommended) 1.4.17beta03.tar.gz 1.4.17beta03.tar.bz2 Source files with CRLF line endings (for Windows), without the "configure" script lp1417b03.7z (LZMA-compressed, recommended) lp1417b03.zip Other information: 1.4.17beta03-README.txt 1.4.17beta03-LICENSE.txt libpng-1.4.17beta03-*.asc (armored detached GPG signatures) Changes since the last public release (1.4.16): version 1.4.17beta01 [August 19, 2015] Fix typecast in a png_debug2() statement in png_set_text_2() to avoid a compiler warning in PNG_DEBUG builds. Avoid Coverity issues 80855, 80856, and 80857 (PRINTF_ARG_MISMATCH) in pngtest.c PNG_DEBUG builds. Avoid Coverity issue 80858 (REVERSE NULL) in pngtest.c PNG_DEBUG builds. Removed WRITE_WEIGHTED_FILTERED code. Added -DZ_SOLO to contrib/pngminim/*/makefile to work with zlib-1.2.7+ Use nanosleep() instead of usleep() in contrib/gregbook/rpng2-x.c because usleep() is deprecated (port from libpng16). Fixed potential leak of png_pixels in contrib/pngminus/pnm2png.c Fixed uninitialized variable in contrib/gregbook/rpng2-x.c Fixed some bad links in the man page. Safely convert num_bytes to a png_byte in png_set_sig_bytes() (Robert Seacord). Fixed the recently reported 1's complement security issue by replacing the value that is illegal in the PNG spec, in both signed and unsigned values, with 0. Illegal unsigned values (anything greater than or equal to 0x80000000) can still pass through, but since these are not illegal in ANSI-C (unlike 0x80000000 in the signed case) the checking that occurs later can catch them (John Bowler). version 1.4.17beta02 [October 15, 2015] Fixed png_save_int_32 when int is not 2's complement (John Bowler). Added sPLT support to pngtest.c version 1.4.17beta03 [October 23, 2015] Added a safety check in png_set_tIME() (Bug report from Qixue Xiao). Send comments/corrections/commendations to glennrp at users.sourceforge.net or to png-mng-implement at lists.sf.net (subscription required; visit https://lists.sourceforge.net/lists/listinfo/png-mng-implement). Glenn R-P