[libpng16] Fixed a potential null pointer dereference in png_set_text…

…_2() (bug report and patch by Patrick Keshishian).
pnggroup · Dec 29, 2016 · 812768d · 812768d
1 parent a3b5edc
commit 812768d
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/ANNOUNCE b/ANNOUNCE
@@ -31,6 +31,8 @@ Changes since the last public release (1.6.26):
     substitution of an expression itself containing a well-formed defined
     operation.
   Added ARM support to CMakeLists.txt (Andreas Franek).
+  Fixed a potential null pointer dereference in png_set_text_2() (bug report
+    and patch by Patrick Keshishian).
 
 Send comments/corrections/commendations to png-mng-implement at lists.sf.net
 (subscription required; visit

diff --git a/CHANGES b/CHANGES
@@ -5771,6 +5771,8 @@ Version 1.6.27rc01 [December 27, 2016]
   Added ARM support to CMakeLists.txt (Andreas Franek).
 
 Version 1.6.27 [December 29, 2016]
+  Fixed a potential null pointer dereference in png_set_text_2() (bug report
+    and patch by Patrick Keshishian)
 
 Send comments/corrections/commendations to png-mng-implement at lists.sf.net
 (subscription required; visit

diff --git a/png.c b/png.c
@@ -477,6 +477,7 @@ png_free_data(png_const_structrp png_ptr, png_inforp info_ptr, png_uint_32 mask,
          png_free(png_ptr, info_ptr->text);
          info_ptr->text = NULL;
          info_ptr->num_text = 0;
+         info_ptr->max_text = 0;
       }
    }
 #endif