Attachment #133458 for bug #195536




      png_warning(png_ptr, "Insufficient memory to process iCCP chunk.");
      return;
   }
   png_strncpy(new_iccp_name, name, png_strlen(name)+1);
   new_iccp_name[png_strlen(name)] = '\0';
   new_iccp_profile = (png_charp)png_malloc_warn(png_ptr, proflen);
   if (new_iccp_profile == NULL)
   {

             "Out of memory while processing sPLT chunk");
        }
        /* TODO: use png_malloc_warn */
        png_strncpy(to->name, from->name, png_strlen(from->name)+1);
        to->name[png_strlen(from->name)] = '\0';
        to->entries = (png_sPLT_entryp)png_malloc_warn(png_ptr,
            from->nentries * png_sizeof(png_sPLT_entry));
        /* TODO: use png_malloc_warn */

Return to bug 195536

Lines 690-697 Link Here

(-)libpng-1.2.22.old/pngset.c (-4 / +2 lines)
690	png_warning(png_ptr, "Insufficient memory to process iCCP chunk.");	690	png_warning(png_ptr, "Insufficient memory to process iCCP chunk.");
691	return;	691	return;
692	}	692	}
693	png_strncpy(new_iccp_name, name, png_strlen(name));	693	png_strncpy(new_iccp_name, name, png_strlen(name)+1);
694	new_iccp_name[png_strlen(name)] = '\0';
695	new_iccp_profile = (png_charp)png_malloc_warn(png_ptr, proflen);	694	new_iccp_profile = (png_charp)png_malloc_warn(png_ptr, proflen);
696	if (new_iccp_profile == NULL)	695	if (new_iccp_profile == NULL)
697	{	696	{
Lines 981-988 Link Here
981	"Out of memory while processing sPLT chunk");	980	"Out of memory while processing sPLT chunk");
982	}	981	}
983	/* TODO: use png_malloc_warn */	982	/* TODO: use png_malloc_warn */
984	png_strncpy(to->name, from->name, png_strlen(from->name));	983	png_strncpy(to->name, from->name, png_strlen(from->name)+1);
985	to->name[png_strlen(from->name)] = '\0';
986	to->entries = (png_sPLT_entryp)png_malloc_warn(png_ptr,	984	to->entries = (png_sPLT_entryp)png_malloc_warn(png_ptr,
987	from->nentries * png_sizeof(png_sPLT_entry));	985	from->nentries * png_sizeof(png_sPLT_entry));
988	/* TODO: use png_malloc_warn */	986	/* TODO: use png_malloc_warn */