pngread.c 128.6 KB
Newer Older
G
Guy Schalnat 已提交
1

A
Andreas Dilger 已提交
2
/* pngread.c - read a PNG file
3
 *
4
 * Last changed in libpng 1.6.0 [(PENDING RELEASE)]
5
 * Copyright (c) 1998-2012 Glenn Randers-Pehrson
6 7
 * (Version 0.96 Copyright (c) 1996, 1997 Andreas Dilger)
 * (Version 0.88 Copyright (c) 1995, 1996 Guy Eric Schalnat, Group 42, Inc.)
8
 *
9
 * This code is released under the libpng license.
10
 * For conditions of distribution and use, see the disclaimer
11
 * and license in png.h
12
 *
13 14 15
 * This file contains routines that an application calls directly to
 * read a PNG file or stream.
 */
G
Guy Schalnat 已提交
16

17
#include "pngpriv.h"
18 19 20
#if defined PNG_SIMPLIFIED_READ_SUPPORTED && defined PNG_STDIO_SUPPORTED
#  include <errno.h>
#endif
21

22
#ifdef PNG_READ_SUPPORTED
23

A
Andreas Dilger 已提交
24
/* Create a PNG structure for reading, and allocate any memory needed. */
25 26 27
PNG_FUNCTION(png_structp,PNGAPI
png_create_read_struct,(png_const_charp user_png_ver, png_voidp error_ptr,
    png_error_ptr error_fn, png_error_ptr warn_fn),PNG_ALLOCATED)
G
Guy Schalnat 已提交
28
{
29 30 31 32 33 34
#ifndef PNG_USER_MEM_SUPPORTED
   png_structp png_ptr = png_create_png_struct(user_png_ver, error_ptr,
      error_fn, warn_fn, NULL, NULL, NULL);
#else
   return png_create_read_struct_2(user_png_ver, error_ptr, error_fn,
       warn_fn, NULL, NULL, NULL);
35 36
}

37 38 39
/* Alternate create PNG structure for reading, and allocate any memory
 * needed.
 */
40 41
PNG_FUNCTION(png_structp,PNGAPI
png_create_read_struct_2,(png_const_charp user_png_ver, png_voidp error_ptr,
42
    png_error_ptr error_fn, png_error_ptr warn_fn, png_voidp mem_ptr,
43
    png_malloc_ptr malloc_fn, png_free_ptr free_fn),PNG_ALLOCATED)
44
{
45 46
   png_structp png_ptr = png_create_png_struct(user_png_ver, error_ptr,
      error_fn, warn_fn, mem_ptr, malloc_fn, free_fn);
47 48
#endif /* PNG_USER_MEM_SUPPORTED */

49
   if (png_ptr != NULL)
50
   {
51 52
      png_ptr->mode = PNG_IS_READ_STRUCT;

53
      /* Added in libpng-1.6.0; this can be used to detect a read structure if
54 55 56 57 58
       * required (it will be zero in a write structure.)
       */
#     ifdef PNG_SEQUENTIAL_READ_SUPPORTED
         png_ptr->IDAT_read_size = PNG_IDAT_READ_SIZE;
#     endif
59 60 61

#     ifdef PNG_BENIGN_READ_ERRORS_SUPPORTED
         png_ptr->flags |= PNG_FLAG_BENIGN_ERRORS_WARN;
62 63 64 65

         /* In stable builds only warn if an application error can be completely
          * handled.
          */
66
#        if PNG_LIBPNG_BUILD_BASE_TYPE >= PNG_LIBPNG_BUILD_RC
67 68
            png_ptr->flags |= PNG_FLAG_APP_WARNINGS_WARN;
#        endif
69 70
#     endif

71 72 73
      /* TODO: delay this, it can be done in png_init_io (if the app doesn't
       * do it itself) avoiding setting the default function if it is not
       * required.
74
       */
75
      png_set_read_fn(png_ptr, NULL, NULL);
76
   }
77

78
   return png_ptr;
G
Guy Schalnat 已提交
79 80
}

81

82
#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
A
Andreas Dilger 已提交
83
/* Read the information before the actual image data.  This has been
84
 * changed in v0.90 to allow reading a file that already has the magic
A
Andreas Dilger 已提交
85
 * bytes read from the stream.  You can tell libpng how many bytes have
86
 * been read from the beginning of the stream (up to the maximum of 8)
A
Andreas Dilger 已提交
87 88 89 90
 * via png_set_sig_bytes(), and we will only check the remaining bytes
 * here.  The application can then have access to the signature bytes we
 * read if it is determined that this isn't a valid PNG file.
 */
91
void PNGAPI
92
png_read_info(png_structrp png_ptr, png_inforp info_ptr)
G
Guy Schalnat 已提交
93
{
94
   png_debug(1, "in png_read_info");
95

96 97
   if (png_ptr == NULL || info_ptr == NULL)
      return;
98

99 100
   /* Read and check the PNG file signature. */
   png_read_sig(png_ptr, info_ptr);
G
Guy Schalnat 已提交
101

102
   for (;;)
G
Guy Schalnat 已提交
103
   {
104
      png_uint_32 length = png_read_chunk_header(png_ptr);
105
      png_uint_32 chunk_name = png_ptr->chunk_name;
A
Andreas Dilger 已提交
106 107 108 109

      /* This should be a binary subdivision search or a hash for
       * matching the chunk name rather than a linear search.
       */
110
      if (chunk_name == png_IDAT)
111 112
         if (png_ptr->mode & PNG_AFTER_IDAT)
            png_ptr->mode |= PNG_HAVE_CHUNK_AFTER_IDAT;
113

114
      if (chunk_name == png_IHDR)
A
Andreas Dilger 已提交
115
         png_handle_IHDR(png_ptr, info_ptr, length);
116

117
      else if (chunk_name == png_IEND)
A
Andreas Dilger 已提交
118
         png_handle_IEND(png_ptr, info_ptr, length);
119

120
#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
121 122
      else if (png_chunk_unknown_handling(png_ptr, chunk_name) !=
         PNG_HANDLE_CHUNK_AS_DEFAULT)
123
      {
124
         if (chunk_name == png_IDAT)
125
            png_ptr->mode |= PNG_HAVE_IDAT;
126

127
         png_handle_unknown(png_ptr, info_ptr, length);
128

129
         if (chunk_name == png_PLTE)
130
            png_ptr->mode |= PNG_HAVE_PLTE;
131

132
         else if (chunk_name == png_IDAT)
133 134 135
         {
            if (!(png_ptr->mode & PNG_HAVE_IHDR))
               png_error(png_ptr, "Missing IHDR before IDAT");
136

137
            else if (png_ptr->color_type == PNG_COLOR_TYPE_PALETTE &&
138
                !(png_ptr->mode & PNG_HAVE_PLTE))
139
               png_error(png_ptr, "Missing PLTE before IDAT");
140

141 142 143 144
            break;
         }
      }
#endif
145
      else if (chunk_name == png_PLTE)
146
         png_handle_PLTE(png_ptr, info_ptr, length);
147

148
      else if (chunk_name == png_IDAT)
A
Andreas Dilger 已提交
149 150 151
      {
         if (!(png_ptr->mode & PNG_HAVE_IHDR))
            png_error(png_ptr, "Missing IHDR before IDAT");
152

A
Andreas Dilger 已提交
153
         else if (png_ptr->color_type == PNG_COLOR_TYPE_PALETTE &&
154
             !(png_ptr->mode & PNG_HAVE_PLTE))
A
Andreas Dilger 已提交
155 156 157 158 159 160
            png_error(png_ptr, "Missing PLTE before IDAT");

         png_ptr->idat_size = length;
         png_ptr->mode |= PNG_HAVE_IDAT;
         break;
      }
161

162
#ifdef PNG_READ_bKGD_SUPPORTED
163
      else if (chunk_name == png_bKGD)
A
Andreas Dilger 已提交
164
         png_handle_bKGD(png_ptr, info_ptr, length);
G
Guy Schalnat 已提交
165
#endif
166

167
#ifdef PNG_READ_cHRM_SUPPORTED
168
      else if (chunk_name == png_cHRM)
A
Andreas Dilger 已提交
169
         png_handle_cHRM(png_ptr, info_ptr, length);
G
Guy Schalnat 已提交
170
#endif
171

172
#ifdef PNG_READ_gAMA_SUPPORTED
173
      else if (chunk_name == png_gAMA)
A
Andreas Dilger 已提交
174
         png_handle_gAMA(png_ptr, info_ptr, length);
G
Guy Schalnat 已提交
175
#endif
176

177
#ifdef PNG_READ_hIST_SUPPORTED
178
      else if (chunk_name == png_hIST)
A
Andreas Dilger 已提交
179
         png_handle_hIST(png_ptr, info_ptr, length);
G
Guy Schalnat 已提交
180
#endif
181

182
#ifdef PNG_READ_oFFs_SUPPORTED
183
      else if (chunk_name == png_oFFs)
A
Andreas Dilger 已提交
184 185
         png_handle_oFFs(png_ptr, info_ptr, length);
#endif
186

187
#ifdef PNG_READ_pCAL_SUPPORTED
188
      else if (chunk_name == png_pCAL)
A
Andreas Dilger 已提交
189 190
         png_handle_pCAL(png_ptr, info_ptr, length);
#endif
191

192
#ifdef PNG_READ_sCAL_SUPPORTED
193
      else if (chunk_name == png_sCAL)
194 195
         png_handle_sCAL(png_ptr, info_ptr, length);
#endif
196

197
#ifdef PNG_READ_pHYs_SUPPORTED
198
      else if (chunk_name == png_pHYs)
A
Andreas Dilger 已提交
199
         png_handle_pHYs(png_ptr, info_ptr, length);
G
Guy Schalnat 已提交
200
#endif
201

202
#ifdef PNG_READ_sBIT_SUPPORTED
203
      else if (chunk_name == png_sBIT)
A
Andreas Dilger 已提交
204 205
         png_handle_sBIT(png_ptr, info_ptr, length);
#endif
206

207
#ifdef PNG_READ_sRGB_SUPPORTED
208
      else if (chunk_name == png_sRGB)
209 210
         png_handle_sRGB(png_ptr, info_ptr, length);
#endif
211

212
#ifdef PNG_READ_iCCP_SUPPORTED
213
      else if (chunk_name == png_iCCP)
214 215
         png_handle_iCCP(png_ptr, info_ptr, length);
#endif
216

217
#ifdef PNG_READ_sPLT_SUPPORTED
218
      else if (chunk_name == png_sPLT)
219 220
         png_handle_sPLT(png_ptr, info_ptr, length);
#endif
221

222
#ifdef PNG_READ_tEXt_SUPPORTED
223
      else if (chunk_name == png_tEXt)
A
Andreas Dilger 已提交
224
         png_handle_tEXt(png_ptr, info_ptr, length);
G
Guy Schalnat 已提交
225
#endif
226

227
#ifdef PNG_READ_tIME_SUPPORTED
228
      else if (chunk_name == png_tIME)
A
Andreas Dilger 已提交
229
         png_handle_tIME(png_ptr, info_ptr, length);
G
Guy Schalnat 已提交
230
#endif
231

232
#ifdef PNG_READ_tRNS_SUPPORTED
233
      else if (chunk_name == png_tRNS)
A
Andreas Dilger 已提交
234
         png_handle_tRNS(png_ptr, info_ptr, length);
G
Guy Schalnat 已提交
235
#endif
236

237
#ifdef PNG_READ_zTXt_SUPPORTED
238
      else if (chunk_name == png_zTXt)
A
Andreas Dilger 已提交
239
         png_handle_zTXt(png_ptr, info_ptr, length);
240
#endif
241

242
#ifdef PNG_READ_iTXt_SUPPORTED
243
      else if (chunk_name == png_iTXt)
244
         png_handle_iTXt(png_ptr, info_ptr, length);
G
Guy Schalnat 已提交
245
#endif
246

A
Andreas Dilger 已提交
247 248
      else
         png_handle_unknown(png_ptr, info_ptr, length);
G
Guy Schalnat 已提交
249 250
   }
}
251
#endif /* PNG_SEQUENTIAL_READ_SUPPORTED */
G
Guy Schalnat 已提交
252

253
/* Optional call to update the users info_ptr structure */
254
void PNGAPI
255
png_read_update_info(png_structrp png_ptr, png_inforp info_ptr)
G
Guy Schalnat 已提交
256
{
257
   png_debug(1, "in png_read_update_info");
258

259 260 261 262 263
   if (png_ptr != NULL)
   {
      if ((png_ptr->flags & PNG_FLAG_ROW_INIT) == 0)
      {
         png_read_start_row(png_ptr);
264

265 266 267 268 269 270
#        ifdef PNG_READ_TRANSFORMS_SUPPORTED
            png_read_transform_info(png_ptr, info_ptr);
#        else
            PNG_UNUSED(info_ptr)
#        endif
      }
271

272 273
      /* New in 1.6.0 this avoids the bug of doing the initializations twice */
      else
274
         png_app_error(png_ptr,
275 276
            "png_read_update_info/png_start_read_image: duplicate call");
   }
G
Guy Schalnat 已提交
277 278
}

279
#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
280 281
/* Initialize palette, background, etc, after transformations
 * are set, but before any reading takes place.  This allows
282
 * the user to obtain a gamma-corrected palette, for example.
283 284
 * If the user doesn't call this, we will do it ourselves.
 */
285
void PNGAPI
286
png_start_read_image(png_structrp png_ptr)
G
Guy Schalnat 已提交
287
{
288
   png_debug(1, "in png_start_read_image");
289

290
   if (png_ptr != NULL)
291 292 293 294 295 296
   {
      if ((png_ptr->flags & PNG_FLAG_ROW_INIT) == 0)
         png_read_start_row(png_ptr);

      /* New in 1.6.0 this avoids the bug of doing the initializations twice */
      else
297
         png_app_error(png_ptr,
298 299
            "png_start_read_image/png_read_update_info: duplicate call");
   }
G
Guy Schalnat 已提交
300
}
301
#endif /* PNG_SEQUENTIAL_READ_SUPPORTED */
G
Guy Schalnat 已提交
302

303
#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
304
void PNGAPI
305
png_read_row(png_structrp png_ptr, png_bytep row, png_bytep dsp_row)
G
Guy Schalnat 已提交
306
{
307 308
   png_row_info row_info;

309 310
   if (png_ptr == NULL)
      return;
311

312
   png_debug2(1, "in png_read_row (row %lu, pass %d)",
313
       (unsigned long)png_ptr->row_number, png_ptr->pass);
314

315 316 317
   /* png_read_start_row sets the information (in particular iwidth) for this
    * interlace pass.
    */
G
Guy Schalnat 已提交
318
   if (!(png_ptr->flags & PNG_FLAG_ROW_INIT))
G
Guy Schalnat 已提交
319
      png_read_start_row(png_ptr);
320

321 322 323 324 325 326 327 328
   /* 1.5.6: row_info moved out of png_struct to a local here. */
   row_info.width = png_ptr->iwidth; /* NOTE: width of current interlaced row */
   row_info.color_type = png_ptr->color_type;
   row_info.bit_depth = png_ptr->bit_depth;
   row_info.channels = png_ptr->channels;
   row_info.pixel_depth = png_ptr->pixel_depth;
   row_info.rowbytes = PNG_ROWBYTES(row_info.pixel_depth, row_info.width);

329 330
   if (png_ptr->row_number == 0 && png_ptr->pass == 0)
   {
331
   /* Check for transforms that have been set but were defined out */
332 333
#if defined(PNG_WRITE_INVERT_SUPPORTED) && !defined(PNG_READ_INVERT_SUPPORTED)
   if (png_ptr->transformations & PNG_INVERT_MONO)
334
      png_warning(png_ptr, "PNG_READ_INVERT_SUPPORTED is not defined");
335
#endif
336

337 338
#if defined(PNG_WRITE_FILLER_SUPPORTED) && !defined(PNG_READ_FILLER_SUPPORTED)
   if (png_ptr->transformations & PNG_FILLER)
339
      png_warning(png_ptr, "PNG_READ_FILLER_SUPPORTED is not defined");
340
#endif
341

342 343
#if defined(PNG_WRITE_PACKSWAP_SUPPORTED) && \
    !defined(PNG_READ_PACKSWAP_SUPPORTED)
344
   if (png_ptr->transformations & PNG_PACKSWAP)
345
      png_warning(png_ptr, "PNG_READ_PACKSWAP_SUPPORTED is not defined");
346
#endif
347

348 349
#if defined(PNG_WRITE_PACK_SUPPORTED) && !defined(PNG_READ_PACK_SUPPORTED)
   if (png_ptr->transformations & PNG_PACK)
350
      png_warning(png_ptr, "PNG_READ_PACK_SUPPORTED is not defined");
351
#endif
352

353 354
#if defined(PNG_WRITE_SHIFT_SUPPORTED) && !defined(PNG_READ_SHIFT_SUPPORTED)
   if (png_ptr->transformations & PNG_SHIFT)
355
      png_warning(png_ptr, "PNG_READ_SHIFT_SUPPORTED is not defined");
356
#endif
357

358 359
#if defined(PNG_WRITE_BGR_SUPPORTED) && !defined(PNG_READ_BGR_SUPPORTED)
   if (png_ptr->transformations & PNG_BGR)
360
      png_warning(png_ptr, "PNG_READ_BGR_SUPPORTED is not defined");
361
#endif
362

363 364
#if defined(PNG_WRITE_SWAP_SUPPORTED) && !defined(PNG_READ_SWAP_SUPPORTED)
   if (png_ptr->transformations & PNG_SWAP_BYTES)
365
      png_warning(png_ptr, "PNG_READ_SWAP_SUPPORTED is not defined");
366 367
#endif
   }
G
Guy Schalnat 已提交
368

369
#ifdef PNG_READ_INTERLACING_SUPPORTED
370 371 372 373 374 375
   /* If interlaced and we do not need a new row, combine row and return.
    * Notice that the pixels we have from previous rows have been transformed
    * already; we can only combine like with like (transformed or
    * untransformed) and, because of the libpng API for interlaced images, this
    * means we must transform before de-interlacing.
    */
G
Guy Schalnat 已提交
376 377 378 379 380
   if (png_ptr->interlaced && (png_ptr->transformations & PNG_INTERLACE))
   {
      switch (png_ptr->pass)
      {
         case 0:
381
            if (png_ptr->row_number & 0x07)
G
Guy Schalnat 已提交
382
            {
A
Andreas Dilger 已提交
383
               if (dsp_row != NULL)
384
                  png_combine_row(png_ptr, dsp_row, 1/*display*/);
G
Guy Schalnat 已提交
385
               png_read_finish_row(png_ptr);
G
Guy Schalnat 已提交
386 387 388
               return;
            }
            break;
389

G
Guy Schalnat 已提交
390
         case 1:
391
            if ((png_ptr->row_number & 0x07) || png_ptr->width < 5)
G
Guy Schalnat 已提交
392
            {
A
Andreas Dilger 已提交
393
               if (dsp_row != NULL)
394
                  png_combine_row(png_ptr, dsp_row, 1/*display*/);
395

G
Guy Schalnat 已提交
396 397 398 399
               png_read_finish_row(png_ptr);
               return;
            }
            break;
400

G
Guy Schalnat 已提交
401
         case 2:
402
            if ((png_ptr->row_number & 0x07) != 4)
G
Guy Schalnat 已提交
403
            {
A
Andreas Dilger 已提交
404
               if (dsp_row != NULL && (png_ptr->row_number & 4))
405
                  png_combine_row(png_ptr, dsp_row, 1/*display*/);
406

G
Guy Schalnat 已提交
407 408 409 410
               png_read_finish_row(png_ptr);
               return;
            }
            break;
411

G
Guy Schalnat 已提交
412 413 414
         case 3:
            if ((png_ptr->row_number & 3) || png_ptr->width < 3)
            {
A
Andreas Dilger 已提交
415
               if (dsp_row != NULL)
416
                  png_combine_row(png_ptr, dsp_row, 1/*display*/);
417

G
Guy Schalnat 已提交
418 419 420 421
               png_read_finish_row(png_ptr);
               return;
            }
            break;
422

G
Guy Schalnat 已提交
423 424
         case 4:
            if ((png_ptr->row_number & 3) != 2)
G
Guy Schalnat 已提交
425
            {
A
Andreas Dilger 已提交
426
               if (dsp_row != NULL && (png_ptr->row_number & 2))
427
                  png_combine_row(png_ptr, dsp_row, 1/*display*/);
428

G
Guy Schalnat 已提交
429 430 431 432
               png_read_finish_row(png_ptr);
               return;
            }
            break;
433

G
Guy Schalnat 已提交
434 435 436
         case 5:
            if ((png_ptr->row_number & 1) || png_ptr->width < 2)
            {
A
Andreas Dilger 已提交
437
               if (dsp_row != NULL)
438
                  png_combine_row(png_ptr, dsp_row, 1/*display*/);
439

G
Guy Schalnat 已提交
440 441 442 443
               png_read_finish_row(png_ptr);
               return;
            }
            break;
444

445
         default:
G
Guy Schalnat 已提交
446
         case 6:
G
Guy Schalnat 已提交
447 448 449 450 451 452 453 454
            if (!(png_ptr->row_number & 1))
            {
               png_read_finish_row(png_ptr);
               return;
            }
            break;
      }
   }
G
Guy Schalnat 已提交
455
#endif
G
Guy Schalnat 已提交
456

G
Guy Schalnat 已提交
457 458
   if (!(png_ptr->mode & PNG_HAVE_IDAT))
      png_error(png_ptr, "Invalid attempt to read row data");
G
Guy Schalnat 已提交
459

460 461
   /* Fill the row with IDAT data: */
   png_read_IDAT_data(png_ptr, png_ptr->row_buf, row_info.rowbytes + 1);
G
Guy Schalnat 已提交
462

463 464 465
   if (png_ptr->row_buf[0] > PNG_FILTER_VALUE_NONE)
   {
      if (png_ptr->row_buf[0] < PNG_FILTER_VALUE_LAST)
466
         png_read_filter_row(png_ptr, &row_info, png_ptr->row_buf + 1,
467 468 469 470
            png_ptr->prev_row + 1, png_ptr->row_buf[0]);
      else
         png_error(png_ptr, "bad adaptive filter value");
   }
G
Guy Schalnat 已提交
471

472 473 474 475 476 477
   /* libpng 1.5.6: the following line was copying png_ptr->rowbytes before
    * 1.5.6, while the buffer really is this big in current versions of libpng
    * it may not be in the future, so this was changed just to copy the
    * interlaced count:
    */
   png_memcpy(png_ptr->prev_row, png_ptr->row_buf, row_info.rowbytes + 1);
478

479
#ifdef PNG_MNG_FEATURES_SUPPORTED
480
   if ((png_ptr->mng_features_permitted & PNG_FLAG_MNG_FILTER_64) &&
481
       (png_ptr->filter_type == PNG_INTRAPIXEL_DIFFERENCING))
482 483
   {
      /* Intrapixel differencing */
484
      png_do_read_intrapixel(&row_info, png_ptr->row_buf + 1);
485 486
   }
#endif
G
Guy Schalnat 已提交
487

488

489
#ifdef PNG_READ_TRANSFORMS_SUPPORTED
490
   if (png_ptr->transformations)
491
      png_do_read_transformations(png_ptr, &row_info);
492
#endif
G
Guy Schalnat 已提交
493

494 495 496 497 498 499 500 501 502 503 504
   /* The transformed pixel depth should match the depth now in row_info. */
   if (png_ptr->transformed_pixel_depth == 0)
   {
      png_ptr->transformed_pixel_depth = row_info.pixel_depth;
      if (row_info.pixel_depth > png_ptr->maximum_pixel_depth)
         png_error(png_ptr, "sequential row overflow");
   }

   else if (png_ptr->transformed_pixel_depth != row_info.pixel_depth)
      png_error(png_ptr, "internal sequential row size calculation error");

505
#ifdef PNG_READ_INTERLACING_SUPPORTED
506
   /* Blow up interlaced rows to full size */
G
Guy Schalnat 已提交
507 508 509 510
   if (png_ptr->interlaced &&
      (png_ptr->transformations & PNG_INTERLACE))
   {
      if (png_ptr->pass < 6)
511 512
         png_do_read_interlace(&row_info, png_ptr->row_buf + 1, png_ptr->pass,
            png_ptr->transformations);
G
Guy Schalnat 已提交
513

A
Andreas Dilger 已提交
514
      if (dsp_row != NULL)
515
         png_combine_row(png_ptr, dsp_row, 1/*display*/);
516

A
Andreas Dilger 已提交
517
      if (row != NULL)
518
         png_combine_row(png_ptr, row, 0/*row*/);
G
Guy Schalnat 已提交
519
   }
520

G
Guy Schalnat 已提交
521
   else
G
Guy Schalnat 已提交
522
#endif
G
Guy Schalnat 已提交
523
   {
A
Andreas Dilger 已提交
524
      if (row != NULL)
525
         png_combine_row(png_ptr, row, -1/*ignored*/);
526

A
Andreas Dilger 已提交
527
      if (dsp_row != NULL)
528
         png_combine_row(png_ptr, dsp_row, -1/*ignored*/);
G
Guy Schalnat 已提交
529 530
   }
   png_read_finish_row(png_ptr);
531 532 533

   if (png_ptr->read_row_fn != NULL)
      (*(png_ptr->read_row_fn))(png_ptr, png_ptr->row_number, png_ptr->pass);
534

G
Guy Schalnat 已提交
535
}
536
#endif /* PNG_SEQUENTIAL_READ_SUPPORTED */
G
Guy Schalnat 已提交
537

538
#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
A
Andreas Dilger 已提交
539
/* Read one or more rows of image data.  If the image is interlaced,
540 541
 * and png_set_interlace_handling() has been called, the rows need to
 * contain the contents of the rows from the previous pass.  If the
542
 * image has alpha or transparency, and png_handle_alpha()[*] has been
543 544
 * called, the rows contents must be initialized to the contents of the
 * screen.
545
 *
546 547 548 549 550 551 552 553 554 555 556 557 558
 * "row" holds the actual image, and pixels are placed in it
 * as they arrive.  If the image is displayed after each pass, it will
 * appear to "sparkle" in.  "display_row" can be used to display a
 * "chunky" progressive image, with finer detail added as it becomes
 * available.  If you do not want this "chunky" display, you may pass
 * NULL for display_row.  If you do not want the sparkle display, and
 * you have not called png_handle_alpha(), you may pass NULL for rows.
 * If you have called png_handle_alpha(), and the image has either an
 * alpha channel or a transparency chunk, you must provide a buffer for
 * rows.  In this case, you do not have to provide a display_row buffer
 * also, but you may.  If the image is not interlaced, or if you have
 * not called png_set_interlace_handling(), the display_row buffer will
 * be ignored, so pass NULL to it.
559
 *
560
 * [*] png_handle_alpha() does not exist yet, as of this version of libpng
561
 */
G
Guy Schalnat 已提交
562

563
void PNGAPI
564
png_read_rows(png_structrp png_ptr, png_bytepp row,
565
    png_bytepp display_row, png_uint_32 num_rows)
G
Guy Schalnat 已提交
566
{
G
Guy Schalnat 已提交
567 568 569
   png_uint_32 i;
   png_bytepp rp;
   png_bytepp dp;
G
Guy Schalnat 已提交
570

571
   png_debug(1, "in png_read_rows");
572

573 574
   if (png_ptr == NULL)
      return;
575

G
Guy Schalnat 已提交
576 577
   rp = row;
   dp = display_row;
578
   if (rp != NULL && dp != NULL)
579 580 581 582
      for (i = 0; i < num_rows; i++)
      {
         png_bytep rptr = *rp++;
         png_bytep dptr = *dp++;
583

584 585
         png_read_row(png_ptr, rptr, dptr);
      }
586

587
   else if (rp != NULL)
588 589
      for (i = 0; i < num_rows; i++)
      {
590
         png_bytep rptr = *rp;
591
         png_read_row(png_ptr, rptr, NULL);
592 593
         rp++;
      }
594

595
   else if (dp != NULL)
596 597 598
      for (i = 0; i < num_rows; i++)
      {
         png_bytep dptr = *dp;
599
         png_read_row(png_ptr, NULL, dptr);
600
         dp++;
601
      }
G
Guy Schalnat 已提交
602
}
603
#endif /* PNG_SEQUENTIAL_READ_SUPPORTED */
G
Guy Schalnat 已提交
604

605
#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
A
Andreas Dilger 已提交
606
/* Read the entire image.  If the image has an alpha channel or a tRNS
607
 * chunk, and you have called png_handle_alpha()[*], you will need to
608 609 610 611 612 613 614
 * initialize the image to the current image that PNG will be overlaying.
 * We set the num_rows again here, in case it was incorrectly set in
 * png_read_start_row() by a call to png_read_update_info() or
 * png_start_read_image() if png_set_interlace_handling() wasn't called
 * prior to either of these functions like it should have been.  You can
 * only call this function once.  If you desire to have an image for
 * each pass of a interlaced image, use png_read_rows() instead.
615
 *
616
 * [*] png_handle_alpha() does not exist yet, as of this version of libpng
617
 */
618
void PNGAPI
619
png_read_image(png_structrp png_ptr, png_bytepp image)
G
Guy Schalnat 已提交
620
{
621
   png_uint_32 i, image_height;
G
Guy Schalnat 已提交
622
   int pass, j;
G
Guy Schalnat 已提交
623
   png_bytepp rp;
G
Guy Schalnat 已提交
624

625
   png_debug(1, "in png_read_image");
626

627 628
   if (png_ptr == NULL)
      return;
629 630

#ifdef PNG_READ_INTERLACING_SUPPORTED
G
[devel]  
Glenn Randers-Pehrson 已提交
631 632 633 634 635 636 637 638
   if (!(png_ptr->flags & PNG_FLAG_ROW_INIT))
   {
      pass = png_set_interlace_handling(png_ptr);
      /* And make sure transforms are initialized. */
      png_start_read_image(png_ptr);
   }
   else
   {
639
      if (png_ptr->interlaced && !(png_ptr->transformations & PNG_INTERLACE))
G
[devel]  
Glenn Randers-Pehrson 已提交
640
      {
641 642 643 644 645 646 647 648
         /* Caller called png_start_read_image or png_read_update_info without
          * first turning on the PNG_INTERLACE transform.  We can fix this here,
          * but the caller should do it!
          */
         png_warning(png_ptr, "Interlace handling should be turned on when "
            "using png_read_image");
         /* Make sure this is set correctly */
         png_ptr->num_rows = png_ptr->height;
G
[devel]  
Glenn Randers-Pehrson 已提交
649 650 651 652 653 654 655
      }

      /* Obtain the pass number, which also turns on the PNG_INTERLACE flag in
       * the above error case.
       */
      pass = png_set_interlace_handling(png_ptr);
   }
656 657 658
#else
   if (png_ptr->interlaced)
      png_error(png_ptr,
659
          "Cannot read interlaced image -- interlace handler disabled");
660

661 662 663
   pass = 1;
#endif

664
   image_height=png_ptr->height;
G
Guy Schalnat 已提交
665

G
Guy Schalnat 已提交
666 667 668
   for (j = 0; j < pass; j++)
   {
      rp = image;
669
      for (i = 0; i < image_height; i++)
G
Guy Schalnat 已提交
670
      {
671
         png_read_row(png_ptr, *rp, NULL);
G
Guy Schalnat 已提交
672 673 674 675
         rp++;
      }
   }
}
676
#endif /* PNG_SEQUENTIAL_READ_SUPPORTED */
G
Guy Schalnat 已提交
677

678
#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
A
Andreas Dilger 已提交
679
/* Read the end of the PNG file.  Will not read past the end of the
680 681 682
 * file, will verify the end is accurate, and will read any comments
 * or time information at the end of the file, if info is not NULL.
 */
683
void PNGAPI
684
png_read_end(png_structrp png_ptr, png_inforp info_ptr)
G
Guy Schalnat 已提交
685
{
686
   png_debug(1, "in png_read_end");
687

688 689
   if (png_ptr == NULL)
      return;
690

691 692 693 694
   /* If png_read_end is called in the middle of reading the rows there may
    * still be pending IDAT data and an owned zstream.  Deal with this here.
    */
   png_read_finish_IDAT(png_ptr);
G
Guy Schalnat 已提交
695

696 697 698 699
#ifdef PNG_READ_CHECK_FOR_INVALID_INDEX_SUPPORTED
   /* Report invalid palette index; added at libng-1.5.10 */
   if (png_ptr->color_type == PNG_COLOR_TYPE_PALETTE &&
      png_ptr->num_palette_max > png_ptr->num_palette)
700
     png_benign_error(png_ptr, "Read palette index exceeding num_palette");
701 702
#endif

G
Guy Schalnat 已提交
703 704
   do
   {
705
      png_uint_32 length = png_read_chunk_header(png_ptr);
706
      png_uint_32 chunk_name = png_ptr->chunk_name;
A
Andreas Dilger 已提交
707

708
      if (chunk_name == png_IHDR)
A
Andreas Dilger 已提交
709
         png_handle_IHDR(png_ptr, info_ptr, length);
710

711
      else if (chunk_name == png_IEND)
712
         png_handle_IEND(png_ptr, info_ptr, length);
713

714
#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
715 716
      else if (png_chunk_unknown_handling(png_ptr, chunk_name) !=
         PNG_HANDLE_CHUNK_AS_DEFAULT)
717
      {
718
         if (chunk_name == png_IDAT)
719
         {
720
            if ((length > 0) || (png_ptr->mode & PNG_HAVE_CHUNK_AFTER_IDAT))
721
               png_benign_error(png_ptr, "Too many IDATs found");
722 723
         }
         png_handle_unknown(png_ptr, info_ptr, length);
724
         if (chunk_name == png_PLTE)
725 726 727
            png_ptr->mode |= PNG_HAVE_PLTE;
      }
#endif
728

729
      else if (chunk_name == png_IDAT)
A
Andreas Dilger 已提交
730 731 732 733
      {
         /* Zero length IDATs are legal after the last IDAT has been
          * read, but not after other chunks have been read.
          */
734
         if ((length > 0) || (png_ptr->mode & PNG_HAVE_CHUNK_AFTER_IDAT))
735
            png_benign_error(png_ptr, "Too many IDATs found");
736

737
         png_crc_finish(png_ptr, length);
A
Andreas Dilger 已提交
738
      }
739
      else if (chunk_name == png_PLTE)
A
Andreas Dilger 已提交
740
         png_handle_PLTE(png_ptr, info_ptr, length);
741

742
#ifdef PNG_READ_bKGD_SUPPORTED
743
      else if (chunk_name == png_bKGD)
A
Andreas Dilger 已提交
744
         png_handle_bKGD(png_ptr, info_ptr, length);
A
Andreas Dilger 已提交
745
#endif
746

747
#ifdef PNG_READ_cHRM_SUPPORTED
748
      else if (chunk_name == png_cHRM)
A
Andreas Dilger 已提交
749 750
         png_handle_cHRM(png_ptr, info_ptr, length);
#endif
751

752
#ifdef PNG_READ_gAMA_SUPPORTED
753
      else if (chunk_name == png_gAMA)
A
Andreas Dilger 已提交
754 755
         png_handle_gAMA(png_ptr, info_ptr, length);
#endif
756

757
#ifdef PNG_READ_hIST_SUPPORTED
758
      else if (chunk_name == png_hIST)
A
Andreas Dilger 已提交
759
         png_handle_hIST(png_ptr, info_ptr, length);
A
Andreas Dilger 已提交
760
#endif
761

762
#ifdef PNG_READ_oFFs_SUPPORTED
763
      else if (chunk_name == png_oFFs)
A
Andreas Dilger 已提交
764
         png_handle_oFFs(png_ptr, info_ptr, length);
A
Andreas Dilger 已提交
765
#endif
766

767
#ifdef PNG_READ_pCAL_SUPPORTED
768
      else if (chunk_name == png_pCAL)
A
Andreas Dilger 已提交
769 770
         png_handle_pCAL(png_ptr, info_ptr, length);
#endif
771

772
#ifdef PNG_READ_sCAL_SUPPORTED
773
      else if (chunk_name == png_sCAL)
774 775
         png_handle_sCAL(png_ptr, info_ptr, length);
#endif
776

777
#ifdef PNG_READ_pHYs_SUPPORTED
778
      else if (chunk_name == png_pHYs)
A
Andreas Dilger 已提交
779 780
         png_handle_pHYs(png_ptr, info_ptr, length);
#endif
781

782
#ifdef PNG_READ_sBIT_SUPPORTED
783
      else if (chunk_name == png_sBIT)
A
Andreas Dilger 已提交
784
         png_handle_sBIT(png_ptr, info_ptr, length);
G
Guy Schalnat 已提交
785
#endif
786

787
#ifdef PNG_READ_sRGB_SUPPORTED
788
      else if (chunk_name == png_sRGB)
789 790
         png_handle_sRGB(png_ptr, info_ptr, length);
#endif
791

792
#ifdef PNG_READ_iCCP_SUPPORTED
793
      else if (chunk_name == png_iCCP)
794 795
         png_handle_iCCP(png_ptr, info_ptr, length);
#endif
796

797
#ifdef PNG_READ_sPLT_SUPPORTED
798
      else if (chunk_name == png_sPLT)
799 800
         png_handle_sPLT(png_ptr, info_ptr, length);
#endif
801

802
#ifdef PNG_READ_tEXt_SUPPORTED
803
      else if (chunk_name == png_tEXt)
A
Andreas Dilger 已提交
804
         png_handle_tEXt(png_ptr, info_ptr, length);
G
Guy Schalnat 已提交
805
#endif
806

807
#ifdef PNG_READ_tIME_SUPPORTED
808
      else if (chunk_name == png_tIME)
A
Andreas Dilger 已提交
809 810
         png_handle_tIME(png_ptr, info_ptr, length);
#endif
811

812
#ifdef PNG_READ_tRNS_SUPPORTED
813
      else if (chunk_name == png_tRNS)
A
Andreas Dilger 已提交
814 815
         png_handle_tRNS(png_ptr, info_ptr, length);
#endif
816

817
#ifdef PNG_READ_zTXt_SUPPORTED
818
      else if (chunk_name == png_zTXt)
A
Andreas Dilger 已提交
819
         png_handle_zTXt(png_ptr, info_ptr, length);
820
#endif
821

822
#ifdef PNG_READ_iTXt_SUPPORTED
823
      else if (chunk_name == png_iTXt)
824
         png_handle_iTXt(png_ptr, info_ptr, length);
G
Guy Schalnat 已提交
825
#endif
826

G
Guy Schalnat 已提交
827
      else
A
Andreas Dilger 已提交
828 829
         png_handle_unknown(png_ptr, info_ptr, length);
   } while (!(png_ptr->mode & PNG_HAVE_IEND));
G
Guy Schalnat 已提交
830
}
831
#endif /* PNG_SEQUENTIAL_READ_SUPPORTED */
G
Guy Schalnat 已提交
832

833 834
/* Free all memory used in the read struct */
static void
835
png_read_destroy(png_structrp png_ptr)
G
Guy Schalnat 已提交
836
{
837
   png_debug(1, "in png_read_destroy");
838

839 840 841 842
#ifdef PNG_READ_GAMMA_SUPPORTED
   png_destroy_gamma_table(png_ptr);
#endif

843
   png_free(png_ptr, png_ptr->big_row_buf);
844
   png_free(png_ptr, png_ptr->big_prev_row);
845
   png_free(png_ptr, png_ptr->read_buffer);
846

847
#ifdef PNG_READ_QUANTIZE_SUPPORTED
A
Andreas Dilger 已提交
848
   png_free(png_ptr, png_ptr->palette_lookup);
849
   png_free(png_ptr, png_ptr->quantize_index);
G
Guy Schalnat 已提交
850
#endif
851

852
   if (png_ptr->free_me & PNG_FREE_PLTE)
853
      png_zfree(png_ptr, png_ptr->palette);
854
   png_ptr->free_me &= ~PNG_FREE_PLTE;
855

856
#if defined(PNG_tRNS_SUPPORTED) || \
857
    defined(PNG_READ_EXPAND_SUPPORTED) || defined(PNG_READ_BACKGROUND_SUPPORTED)
858
   if (png_ptr->free_me & PNG_FREE_TRNS)
859
      png_free(png_ptr, png_ptr->trans_alpha);
860
   png_ptr->free_me &= ~PNG_FREE_TRNS;
861
#endif
862

A
Andreas Dilger 已提交
863
   inflateEnd(&png_ptr->zstream);
864

G
Guy Schalnat 已提交
865
#ifdef PNG_PROGRESSIVE_READ_SUPPORTED
A
Andreas Dilger 已提交
866
   png_free(png_ptr, png_ptr->save_buffer);
G
Guy Schalnat 已提交
867
#endif
G
Guy Schalnat 已提交
868

869 870 871 872 873 874 875 876
#ifdef PNG_UNKNOWN_CHUNKS_SUPPORTED
   png_free(png_ptr, png_ptr->unknown_chunk.data);
#endif

#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
   png_free(png_ptr, png_ptr->chunk_list);
#endif

877 878 879
   /* NOTE: the 'setjmp' buffer may still be allocated and the memory and error
    * callbacks are still set at this point.  They are required to complete the
    * destruction of the png_struct itself.
G
Guy Schalnat 已提交
880
    */
881
}
G
Guy Schalnat 已提交
882

883 884 885 886 887
/* Free all memory used by the read */
void PNGAPI
png_destroy_read_struct(png_structpp png_ptr_ptr, png_infopp info_ptr_ptr,
    png_infopp end_info_ptr_ptr)
{
888
   png_structrp png_ptr = NULL;
G
Guy Schalnat 已提交
889

890
   png_debug(1, "in png_destroy_read_struct");
G
Guy Schalnat 已提交
891

892 893
   if (png_ptr_ptr != NULL)
      png_ptr = *png_ptr_ptr;
G
Guy Schalnat 已提交
894

895 896 897 898 899 900 901 902 903
   if (png_ptr == NULL)
      return;

   /* libpng 1.6.0: use the API to destroy info structs to ensure consistent
    * behavior.  Prior to 1.6.0 libpng did extra 'info' destruction in this API.
    * The extra was, apparently, unnecessary yet this hides memory leak bugs.
    */
   png_destroy_info_struct(png_ptr, end_info_ptr_ptr);
   png_destroy_info_struct(png_ptr, info_ptr_ptr);
904

905 906 907
   *png_ptr_ptr = NULL;
   png_read_destroy(png_ptr);
   png_destroy_png_struct(png_ptr);
G
Guy Schalnat 已提交
908
}
909

910
void PNGAPI
911
png_set_read_status_fn(png_structrp png_ptr, png_read_status_ptr read_row_fn)
912
{
913 914
   if (png_ptr == NULL)
      return;
915

916 917
   png_ptr->read_row_fn = read_row_fn;
}
918

919

920
#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
921
#ifdef PNG_INFO_IMAGE_SUPPORTED
922
void PNGAPI
923
png_read_png(png_structrp png_ptr, png_inforp info_ptr,
924 925 926 927 928
                           int transforms,
                           voidp params)
{
   int row;

929
   if (png_ptr == NULL || info_ptr == NULL)
930
      return;
931

932
   /* png_read_info() gives us all of the information from the
933 934 935
    * PNG file before the first IDAT (image data chunk).
    */
   png_read_info(png_ptr, info_ptr);
936
   if (info_ptr->height > PNG_UINT_32_MAX/(sizeof (png_bytep)))
937
      png_error(png_ptr, "Image is too high to process with png_read_png()");
938 939 940

   /* -------------- image transformations start here ------------------- */

941
#ifdef PNG_READ_SCALE_16_TO_8_SUPPORTED
942
   /* Tell libpng to strip 16-bit/color files down to 8 bits per color.
943
    */
944
   if (transforms & PNG_TRANSFORM_SCALE_16)
945
   {
946 947 948
     /* Added at libpng-1.5.4. "strip_16" produces the same result that it
      * did in earlier versions, while "scale_16" is now more accurate.
      */
949 950 951 952 953
      png_set_scale_16(png_ptr);
   }
#endif

#ifdef PNG_READ_STRIP_16_TO_8_SUPPORTED
954 955 956 957 958 959
   /* If both SCALE and STRIP are required pngrtran will effectively cancel the
    * latter by doing SCALE first.  This is ok and allows apps not to check for
    * which is supported to get the right answer.
    */
   if (transforms & PNG_TRANSFORM_STRIP_16)
      png_set_strip_16(png_ptr);
960 961
#endif

962
#ifdef PNG_READ_STRIP_ALPHA_SUPPORTED
963 964
   /* Strip alpha bytes from the input data without combining with
    * the background (not recommended).
965 966
    */
   if (transforms & PNG_TRANSFORM_STRIP_ALPHA)
967
      png_set_strip_alpha(png_ptr);
968 969
#endif

970
#if defined(PNG_READ_PACK_SUPPORTED) && !defined(PNG_READ_EXPAND_SUPPORTED)
971
   /* Extract multiple pixels with bit depths of 1, 2, or 4 from a single
972 973 974
    * byte into separate bytes (useful for paletted and grayscale images).
    */
   if (transforms & PNG_TRANSFORM_PACKING)
975
      png_set_packing(png_ptr);
976 977
#endif

978
#ifdef PNG_READ_PACKSWAP_SUPPORTED
979
   /* Change the order of packed pixels to least significant bit first
980 981
    * (not useful if you are using png_set_packing).
    */
982
   if (transforms & PNG_TRANSFORM_PACKSWAP)
983
      png_set_packswap(png_ptr);
984 985
#endif

986
#ifdef PNG_READ_EXPAND_SUPPORTED
987 988 989 990 991 992
   /* Expand paletted colors into true RGB triplets
    * Expand grayscale images to full 8 bits from 1, 2, or 4 bits/pixel
    * Expand paletted or RGB images with transparency to full alpha
    * channels so the data will be available as RGBA quartets.
    */
   if (transforms & PNG_TRANSFORM_EXPAND)
993 994 995
      if ((png_ptr->bit_depth < 8) ||
          (png_ptr->color_type == PNG_COLOR_TYPE_PALETTE) ||
          (png_get_valid(png_ptr, info_ptr, PNG_INFO_tRNS)))
996
         png_set_expand(png_ptr);
997 998
#endif

999
   /* We don't handle background color or gamma transformation or quantizing.
1000
    */
1001

1002
#ifdef PNG_READ_INVERT_SUPPORTED
1003
   /* Invert monochrome files to have 0 as white and 1 as black
1004
    */
1005
   if (transforms & PNG_TRANSFORM_INVERT_MONO)
1006
      png_set_invert_mono(png_ptr);
1007 1008
#endif

1009
#ifdef PNG_READ_SHIFT_SUPPORTED
1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023
   /* If you want to shift the pixel values from the range [0,255] or
    * [0,65535] to the original [0,7] or [0,31], or whatever range the
    * colors were originally in:
    */
   if ((transforms & PNG_TRANSFORM_SHIFT)
       && png_get_valid(png_ptr, info_ptr, PNG_INFO_sBIT))
   {
      png_color_8p sig_bit;

      png_get_sBIT(png_ptr, info_ptr, &sig_bit);
      png_set_shift(png_ptr, sig_bit);
   }
#endif

1024
#ifdef PNG_READ_BGR_SUPPORTED
1025
   /* Flip the RGB pixels to BGR (or RGBA to BGRA) */
1026
   if (transforms & PNG_TRANSFORM_BGR)
1027
      png_set_bgr(png_ptr);
1028 1029
#endif

1030
#ifdef PNG_READ_SWAP_ALPHA_SUPPORTED
1031
   /* Swap the RGBA or GA data to ARGB or AG (or BGRA to ABGR) */
1032
   if (transforms & PNG_TRANSFORM_SWAP_ALPHA)
1033
      png_set_swap_alpha(png_ptr);
1034 1035
#endif

1036
#ifdef PNG_READ_SWAP_SUPPORTED
1037
   /* Swap bytes of 16-bit files to least significant byte first */
1038
   if (transforms & PNG_TRANSFORM_SWAP_ENDIAN)
1039
      png_set_swap(png_ptr);
1040 1041
#endif

1042
/* Added at libpng-1.2.41 */
1043
#ifdef PNG_READ_INVERT_ALPHA_SUPPORTED
1044
   /* Invert the alpha channel from opacity to transparency */
1045
   if (transforms & PNG_TRANSFORM_INVERT_ALPHA)
1046
      png_set_invert_alpha(png_ptr);
1047 1048
#endif

1049
/* Added at libpng-1.2.41 */
1050
#ifdef PNG_READ_GRAY_TO_RGB_SUPPORTED
1051
   /* Expand grayscale image to RGB */
1052
   if (transforms & PNG_TRANSFORM_GRAY_TO_RGB)
1053
      png_set_gray_to_rgb(png_ptr);
1054 1055
#endif

1056
/* Added at libpng-1.5.4 */
1057 1058 1059 1060 1061
#ifdef PNG_READ_EXPAND_16_SUPPORTED
   if (transforms & PNG_TRANSFORM_EXPAND_16)
      png_set_expand_16(png_ptr);
#endif

1062 1063
   /* We don't handle adding filler bytes */

1064 1065 1066 1067 1068
   /* We use png_read_image and rely on that for interlace handling, but we also
    * call png_read_update_info therefore must turn on interlace handling now:
    */
   (void)png_set_interlace_handling(png_ptr);

1069 1070
   /* Optional call to gamma correct and add the background to the palette
    * and update info structure.  REQUIRED if you are expecting libpng to
1071
    * update the palette for you (i.e., you selected such a transform above).
1072 1073 1074 1075 1076
    */
   png_read_update_info(png_ptr, info_ptr);

   /* -------------- image transformations end here ------------------- */

1077
   png_free_data(png_ptr, info_ptr, PNG_FREE_ROWS, 0);
1078
   if (info_ptr->row_pointers == NULL)
1079
   {
1080
      png_uint_32 iptr;
1081

1082
      info_ptr->row_pointers = (png_bytepp)png_malloc(png_ptr,
1083
          info_ptr->height * (sizeof (png_bytep)));
1084 1085 1086
      for (iptr=0; iptr<info_ptr->height; iptr++)
         info_ptr->row_pointers[iptr] = NULL;

1087
      info_ptr->free_me |= PNG_FREE_ROWS;
1088

1089
      for (row = 0; row < (int)info_ptr->height; row++)
1090
         info_ptr->row_pointers[row] = (png_bytep)png_malloc(png_ptr,
1091
            png_get_rowbytes(png_ptr, info_ptr));
1092
   }
1093 1094 1095 1096

   png_read_image(png_ptr, info_ptr->row_pointers);
   info_ptr->valid |= PNG_INFO_IDAT;

1097
   /* Read rest of file, and get additional chunks in info_ptr - REQUIRED */
1098
   png_read_end(png_ptr, info_ptr);
1099

1100 1101
   PNG_UNUSED(transforms)   /* Quiet compiler warnings */
   PNG_UNUSED(params)
1102

1103
}
1104
#endif /* PNG_INFO_IMAGE_SUPPORTED */
1105
#endif /* PNG_SEQUENTIAL_READ_SUPPORTED */
1106 1107 1108 1109 1110 1111 1112

#ifdef PNG_SIMPLIFIED_READ_SUPPORTED
/* SIMPLIFIED READ
 *
 * This code currently relies on the sequential reader, though it could easily
 * be made to work with the progressive one.
 */
1113 1114 1115
/* Arguments to png_image_finish_read: */

/* Encoding of PNG data (used by the color-map code) */
1116
/* TODO: change these, dang, ANSI-C reserves the 'E' namespace. */
1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145
#  define E_NOTSET  0 /* File encoding not yet known */
#  define E_sRGB    1 /* 8-bit encoded to sRGB gamma */
#  define E_LINEAR  2 /* 16-bit linear: not encoded, NOT pre-multiplied! */
#  define E_FILE    3 /* 8-bit encoded to file gamma, not sRGB or linear */
#  define E_LINEAR8 4 /* 8-bit linear: only from a file value */

/* Color-map processing: after libpng has run on the PNG image further
 * processing may be needed to conver the data to color-map indicies.
 */
#define PNG_CMAP_NONE      0
#define PNG_CMAP_GA        1 /* Process GA data to a color-map with alpha */
#define PNG_CMAP_TRANS     2 /* Process GA data to a background index */
#define PNG_CMAP_RGB       3 /* Process RGB data */
#define PNG_CMAP_RGB_ALPHA 4 /* Process RGBA data */

/* The following document where the background is for each processing case. */
#define PNG_CMAP_NONE_BACKGROUND      256
#define PNG_CMAP_GA_BACKGROUND        231
#define PNG_CMAP_TRANS_BACKGROUND     254
#define PNG_CMAP_RGB_BACKGROUND       256
#define PNG_CMAP_RGB_ALPHA_BACKGROUND 216

typedef struct
{
   /* Arguments: */
   png_imagep image;
   png_voidp  buffer;
   png_int_32 row_stride;
   png_voidp  colormap;
1146
   png_const_colorp background;
1147
   /* Local variables: */
1148 1149
   png_voidp       local_row;
   png_voidp       first_row;
1150 1151 1152 1153 1154 1155
   ptrdiff_t       row_bytes;           /* step between rows */
   int             file_encoding;       /* E_ values above */
   png_fixed_point gamma_to_linear;     /* For E_FILE, reciprocal of gamma */
   int             colormap_processing; /* PNG_CMAP_ values above */
} png_image_read_control;

1156
/* Do all the *safe* initialization - 'safe' means that png_error won't be
1157 1158 1159
 * called, so setting up the jmp_buf is not required.  This means that anything
 * called from here must *not* call png_malloc - it has to call png_malloc_warn
 * instead so that control is returned safely back to this routine.
1160 1161 1162 1163
 */
static int
png_image_read_init(png_imagep image)
{
1164 1165 1166
   if (image->opaque == NULL)
   {
      png_structp png_ptr = png_create_read_struct(PNG_LIBPNG_VER_STRING, image,
1167 1168
          png_safe_error, png_safe_warning);

1169 1170 1171
      /* And set the rest of the structure to NULL to ensure that the various
       * fields are consistent.
       */
1172
      png_memset(image, 0, (sizeof *image));
1173
      image->version = PNG_IMAGE_VERSION;
1174

1175
      if (png_ptr != NULL)
1176
      {
1177
         png_infop info_ptr = png_create_info_struct(png_ptr);
1178

1179
         if (info_ptr != NULL)
1180
         {
1181
            png_controlp control = png_voidcast(png_controlp,
1182
               png_malloc_warn(png_ptr, (sizeof *control)));
1183 1184 1185

            if (control != NULL)
            {
1186
               png_memset(control, 0, (sizeof *control));
1187 1188 1189 1190

               control->png_ptr = png_ptr;
               control->info_ptr = info_ptr;
               control->for_write = 0;
1191

1192 1193 1194
               image->opaque = control;
               return 1;
            }
1195

1196 1197
            /* Error clean up */
            png_destroy_info_struct(png_ptr, &info_ptr);
1198 1199
         }

1200
         png_destroy_read_struct(&png_ptr, NULL, NULL);
1201 1202
      }

1203
      return png_image_error(image, "png_image_read: out of memory");
1204 1205
   }

1206
   return png_image_error(image, "png_image_read: opaque pointer not NULL");
1207 1208 1209 1210
}

/* Utility to find the base format of a PNG file from a png_struct. */
static png_uint_32
1211
png_image_format(png_structrp png_ptr)
1212 1213 1214 1215 1216 1217 1218 1219 1220
{
   png_uint_32 format = 0;

   if (png_ptr->color_type & PNG_COLOR_MASK_COLOR)
      format |= PNG_FORMAT_FLAG_COLOR;

   if (png_ptr->color_type & PNG_COLOR_MASK_ALPHA)
      format |= PNG_FORMAT_FLAG_ALPHA;

1221 1222 1223 1224 1225 1226
   /* Use png_ptr here, not info_ptr, because by examination png_handle_tRNS
    * sets the png_struct fields; that's all we are interested in here.  The
    * precise interaction with an app call to png_set_tRNS and PNG file reading
    * is unclear.
    */
   else if (png_ptr->num_trans > 0)
1227 1228 1229 1230 1231
      format |= PNG_FORMAT_FLAG_ALPHA;

   if (png_ptr->bit_depth == 16)
      format |= PNG_FORMAT_FLAG_LINEAR;

1232 1233 1234
   if (png_ptr->color_type & PNG_COLOR_MASK_PALETTE)
      format |= PNG_FORMAT_FLAG_COLORMAP;

1235 1236 1237
   return format;
}

1238 1239 1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257
/* Is the given gamma significantly different from sRGB?  The test is the same
 * one used in pngrtran.c when deciding whether to do gamma correction.  The
 * arithmetic optimizes the division by using the fact that the inverse of the
 * file sRGB gamma is 2.2
 */
static int
png_gamma_not_sRGB(png_fixed_point g)
{
   if (g < PNG_FP_1)
   {
      /* An uninitialized gamma is assumed to be sRGB for the simplified API. */
      if (g == 0)
         return 0;

      return png_gamma_significant((g * 11 + 2)/5 /* i.e. *2.2, rounded */);
   }

   return 1;
}

1258 1259 1260 1261 1262 1263 1264
/* Do the main body of a 'png_image_begin_read' function; read the PNG file
 * header and fill in all the information.  This is executed in a safe context,
 * unlike the init routine above.
 */
static int
png_image_read_header(png_voidp argument)
{
1265
   png_imagep image = png_voidcast(png_imagep, argument);
1266 1267
   png_structrp png_ptr = image->opaque->png_ptr;
   png_inforp info_ptr = image->opaque->info_ptr;
1268

1269
   png_set_benign_errors(png_ptr, 1/*warn*/);
1270 1271 1272 1273 1274 1275 1276
   png_read_info(png_ptr, info_ptr);

   /* Do this the fast way; just read directly out of png_struct. */
   image->width = png_ptr->width;
   image->height = png_ptr->height;

   {
1277
      png_uint_32 format = png_image_format(png_ptr);
1278 1279

      image->format = format;
1280

1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291
#ifdef PNG_COLORSPACE_SUPPORTED
      /* Does the colorspace match sRGB?  If there is no color endpoint
       * (colorant) information assume yes, otherwise require the
       * 'ENDPOINTS_MATCHE_sRGB' colorspace flag to have been set.  If the
       * colorspace has been determined to be invalid ignore it.
       */
      if ((format & PNG_FORMAT_FLAG_COLOR) != 0 && ((png_ptr->colorspace.flags
         & (PNG_COLORSPACE_HAVE_ENDPOINTS|PNG_COLORSPACE_ENDPOINTS_MATCH_sRGB|
            PNG_COLORSPACE_INVALID)) == PNG_COLORSPACE_HAVE_ENDPOINTS))
         image->flags |= PNG_IMAGE_FLAG_COLORSPACE_NOT_sRGB;
#endif
1292 1293
   }

1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466
   /* We need the maximum number of entries regardless of the format the
    * application sets here.
    */
   {
      png_uint_32 cmap_entries;

      switch (png_ptr->color_type)
      {
         case PNG_COLOR_TYPE_GRAY:
            cmap_entries = 1U << png_ptr->bit_depth;
            break;

         case PNG_COLOR_TYPE_PALETTE:
            cmap_entries = png_ptr->num_palette;
            break;

         default:
            cmap_entries = 256;
            break;
      }

      if (cmap_entries > 256)
         cmap_entries = 256;

      image->colormap_entries = cmap_entries;
   }

   return 1;
}

#ifdef PNG_STDIO_SUPPORTED
int PNGAPI
png_image_begin_read_from_stdio(png_imagep image, FILE* file)
{
   if (image != NULL && image->version == PNG_IMAGE_VERSION)
   {
      if (file != NULL)
      {
         if (png_image_read_init(image))
         {
            /* This is slightly evil, but png_init_io doesn't do anything other
             * than this and we haven't changed the standard IO functions so
             * this saves a 'safe' function.
             */
            image->opaque->png_ptr->io_ptr = file;
            return png_safe_execute(image, png_image_read_header, image);
         }
      }

      else
         return png_image_error(image,
            "png_image_begin_read_from_stdio: invalid argument");
   }

   return 0;
}

int PNGAPI
png_image_begin_read_from_file(png_imagep image, const char *file_name)
{
   if (image != NULL && image->version == PNG_IMAGE_VERSION)
   {
      if (file_name != NULL)
      {
         FILE *fp = fopen(file_name, "rb");

         if (fp != NULL)
         {
            if (png_image_read_init(image))
            {
               image->opaque->png_ptr->io_ptr = fp;
               image->opaque->owned_file = 1;
               return png_safe_execute(image, png_image_read_header, image);
            }

            /* Clean up: just the opened file. */
            (void)fclose(fp);
         }

         else
            return png_image_error(image, strerror(errno));
      }

      else
         return png_image_error(image,
            "png_image_begin_read_from_file: invalid argument");
   }

   return 0;
}
#endif /* PNG_STDIO_SUPPORTED */

static void PNGCBAPI
png_image_memory_read(png_structp png_ptr, png_bytep out, png_size_t need)
{
   if (png_ptr != NULL)
   {
      png_imagep image = png_voidcast(png_imagep, png_ptr->io_ptr);
      if (image != NULL)
      {
         png_controlp cp = image->opaque;
         if (cp != NULL)
         {
            png_const_bytep memory = cp->memory;
            png_size_t size = cp->size;

            if (memory != NULL && size >= need)
            {
               png_memcpy(out, memory, need);
               cp->memory = memory + need;
               cp->size = size - need;
               return;
            }

            png_error(png_ptr, "read beyond end of data");
         }
      }

      png_error(png_ptr, "invalid memory read");
   }
}

int PNGAPI png_image_begin_read_from_memory(png_imagep image,
   png_const_voidp memory, png_size_t size)
{
   if (image != NULL && image->version == PNG_IMAGE_VERSION)
   {
      if (memory != NULL && size > 0)
      {
         if (png_image_read_init(image))
         {
            /* Now set the IO functions to read from the memory buffer and
             * store it into io_ptr.  Again do this in-place to avoid calling a
             * libpng function that requires error handling.
             */
            image->opaque->memory = png_voidcast(png_const_bytep, memory);
            image->opaque->size = size;
            image->opaque->png_ptr->io_ptr = image;
            image->opaque->png_ptr->read_data_fn = png_image_memory_read;

            return png_safe_execute(image, png_image_read_header, image);
         }
      }

      else
         return png_image_error(image,
            "png_image_begin_read_from_memory: invalid argument");
   }

   return 0;
}

/* Utility function to skip chunks that are not used by the simplified image
 * read functions and an appropriate macro to call it.
 */
#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
static void
png_image_skip_unused_chunks(png_structrp png_ptr)
{
   /* Prepare the reader to ignore all recognized chunks whose data will not
    * be used, i.e., all chunks recognized by libpng except for those
    * involved in basic image reading:
    *
    *    IHDR, PLTE, IDAT, IEND
    *
    * Or image data handling:
    *
    *    tRNS, bKGD, gAMA, cHRM, sRGB, iCCP and sBIT.
    *
    * This provides a small performance improvement and eliminates any
    * potential vulnerability to security problems in the unused chunks.
    */
   {
1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478
         static PNG_CONST png_byte chunks_to_process[] = {
            98,  75,  71,  68, '\0',  /* bKGD */
            99,  72,  82,  77, '\0',  /* cHRM */
           103,  65,  77,  65, '\0',  /* gAMA */
           105,  67,  67,  80, '\0',  /* iCCP */
           115,  66,  73,  84, '\0',  /* sBIT */
           115,  82,  71,  66, '\0',  /* sRGB */
           };

       /* Ignore unknown chunks and all other chunks except for the
        * IHDR, PLTE, tRNS, IDAT, and IEND chunks.
        */
1479
       png_set_keep_unknown_chunks(png_ptr, 1 /* PNG_HANDLE_CHUNK_NEVER */,
1480
         NULL, -1);
1481

1482 1483 1484
       /* But do not ignore image data handling chunks */
       png_set_keep_unknown_chunks(png_ptr, 0 /* PNG_HANDLE_CHUNK_AS_DEFAULT */,
         chunks_to_process, (sizeof chunks_to_process)/5);
1485 1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497 1498 1499 1500 1501 1502
    }
}

#  define PNG_SKIP_CHUNKS(p) png_image_skip_unused_chunks(p)
#else
#  define PNG_SKIP_CHUNKS(p) ((void)0)
#endif /* PNG_HANDLE_AS_UNKNOWN_SUPPORTED */

/* The following macro gives the exact rounded answer for all values in the
 * range 0..255 (it actually divides by 51.2, but the rounding still generates
 * the correct numbers 0..5
 */
#define PNG_DIV51(v8) (((v8) * 5 + 130) >> 8)

/* Utility functions to make particular color-maps */
static void
set_file_encoding(png_image_read_control *display)
{
1503
   png_fixed_point g = display->image->opaque->png_ptr->colorspace.gamma;
1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590 1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614 1615 1616 1617 1618 1619 1620 1621 1622 1623 1624 1625 1626 1627 1628 1629 1630 1631 1632 1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651 1652 1653 1654 1655 1656 1657 1658 1659 1660 1661 1662 1663 1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674 1675 1676 1677 1678 1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689 1690 1691 1692 1693 1694 1695 1696 1697 1698 1699 1700 1701 1702 1703 1704 1705 1706 1707 1708 1709 1710 1711 1712 1713 1714 1715 1716 1717 1718 1719 1720 1721 1722 1723 1724 1725 1726 1727 1728 1729 1730 1731 1732 1733 1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767 1768 1769 1770 1771 1772 1773 1774 1775 1776 1777 1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804 1805 1806 1807 1808 1809 1810 1811
   if (png_gamma_significant(g))
   {
      if (png_gamma_not_sRGB(g))
      {
         display->file_encoding = E_FILE;
         display->gamma_to_linear = png_reciprocal(g);
      }

      else
         display->file_encoding = E_sRGB;
   }

   else
      display->file_encoding = E_LINEAR8;
}

static unsigned int
decode_gamma(png_image_read_control *display, png_uint_32 value, int encoding)
{
   if (encoding == E_FILE) /* double check */
      encoding = display->file_encoding;

   if (encoding == E_NOTSET) /* must be the file encoding */
   {
      set_file_encoding(display);
      encoding = display->file_encoding;
   }

   switch (encoding)
   {
      case E_FILE:
         value = png_gamma_16bit_correct(value*257, display->gamma_to_linear);
         break;

      case E_sRGB:
         value = png_sRGB_table[value];
         break;

      case E_LINEAR:
         break;

      case E_LINEAR8:
         value *= 257;
         break;

      default:
         png_error(display->image->opaque->png_ptr,
            "unexpected encoding (internal error)");
         break;
   }

   return value;
}

static png_uint_32
png_colormap_compose(png_image_read_control *display,
   png_uint_32 foreground, int foreground_encoding, png_uint_32 alpha,
   png_uint_32 background, int encoding)
{
   /* The file value is composed on the background, the background has the given
    * encoding and so does the result, the file is encoded with E_FILE and the
    * file and alpha are 8-bit values.  The (output) encoding will always be
    * E_LINEAR or E_sRGB.
    */
   png_uint_32 f = decode_gamma(display, foreground, foreground_encoding);
   png_uint_32 b = decode_gamma(display, background, encoding);

   /* The alpha is always an 8-bit value (it comes from the palette), the value
    * scaled by 255 is what PNG_sRGB_FROM_LINEAR requires.
    */
   f = f * alpha + b * (255-alpha);

   if (encoding == E_LINEAR)
   {
      /* Scale to 65535; divide by 255, approximately (in fact this is extremely
       * accurate, it divides by 255.00000005937181414556, with no overflow.)
       */
      f *= 257; /* Now scaled by 65535 */
      f += f >> 16;
      f = (f+32768) >> 16;
   }

   else /* E_sRGB */
      f = PNG_sRGB_FROM_LINEAR(f);

   return f;
}

/* NOTE: E_LINEAR values to this routine must be 16-bit, but E_FILE values must
 * be 8-bit.
 */
static void
png_create_colormap_entry(png_image_read_control *display,
   png_uint_32 ip, png_uint_32 red, png_uint_32 green, png_uint_32 blue,
   png_uint_32 alpha, int encoding)
{
   png_imagep image = display->image;
   const int output_encoding = (image->format & PNG_FORMAT_FLAG_LINEAR) ?
      E_LINEAR : E_sRGB;
   const int convert_to_Y = (image->format & PNG_FORMAT_FLAG_COLOR) == 0 &&
      (red != green || green != blue);

   if (ip > 255)
      png_error(image->opaque->png_ptr, "color-map index out of range");

   /* Update the cache with whether the file gamma is significantly different
    * from sRGB.
    */
   if (encoding == E_FILE)
   {
      if (display->file_encoding == E_NOTSET)
         set_file_encoding(display);

      /* Note that the cached value may be E_FILE too, but if it is then the
       * gamma_to_linear member has been set.
       */
      encoding = display->file_encoding;
   }

   if (encoding == E_FILE)
   {
      png_fixed_point g = display->gamma_to_linear;

      red = png_gamma_16bit_correct(red*257, g);
      green = png_gamma_16bit_correct(green*257, g);
      blue = png_gamma_16bit_correct(blue*257, g);

      if (convert_to_Y || output_encoding == E_LINEAR)
      {
         alpha *= 257;
         encoding = E_LINEAR;
      }

      else
      {
         red = PNG_sRGB_FROM_LINEAR(red * 255);
         green = PNG_sRGB_FROM_LINEAR(green * 255);
         blue = PNG_sRGB_FROM_LINEAR(blue * 255);
         encoding = E_sRGB;
      }
   }

   else if (encoding == E_LINEAR8)
   {
      /* This encoding occurs quite frequently in test cases because PngSuite
       * includes a gAMA 1.0 chunk with most images.
       */
      red *= 257;
      green *= 257;
      blue *= 257;
      alpha *= 257;
      encoding = E_LINEAR;
   }

   else if (encoding == E_sRGB && (convert_to_Y || output_encoding == E_LINEAR))
   {
      /* The values are 8-bit sRGB values, but must be converted to 16-bit
       * linear.
       */
      red = png_sRGB_table[red];
      green = png_sRGB_table[green];
      blue = png_sRGB_table[blue];
      alpha *= 257;
      encoding = E_LINEAR;
   }

   /* This is set if the color isn't gray but the output is. */
   if (encoding == E_LINEAR)
   {
      if (convert_to_Y)
      {
         /* NOTE: these values are copied from png_do_rgb_to_gray */
         png_uint_32 y = (png_uint_32)6968 * red  + (png_uint_32)23434 * green +
            (png_uint_32)2366 * blue;

         if (output_encoding == E_LINEAR)
            y = (y + 16384) >> 15;

         else
         {
            /* y is scaled by 32768, we need it scaled by 255: */
            y = (y + 128) >> 8;
            y *= 255;
            y = PNG_sRGB_FROM_LINEAR((y + 64) >> 7);
            encoding = E_sRGB;
         }

         blue = red = green = y;
      }

      else if (output_encoding == E_sRGB)
      {
         red = PNG_sRGB_FROM_LINEAR(red * 255);
         green = PNG_sRGB_FROM_LINEAR(green * 255);
         blue = PNG_sRGB_FROM_LINEAR(blue * 255);
         alpha = PNG_DIV257(alpha);
         encoding = E_sRGB;
      }
   }

   if (encoding != output_encoding)
      png_error(image->opaque->png_ptr, "bad encoding (internal error)");

   /* Store the value. */
   {
#     ifdef PNG_FORMAT_BGR_SUPPORTED
         const int afirst = (image->format & PNG_FORMAT_FLAG_AFIRST) != 0 &&
            (image->format & PNG_FORMAT_FLAG_ALPHA) != 0;
#     else
#        define afirst 0
#     endif
#     ifdef PNG_FORMAT_BGR_SUPPORTED
         const int bgr = (image->format & PNG_FORMAT_FLAG_BGR) ? 2 : 0;
#     else
#        define bgr 0
#     endif

      if (output_encoding == E_LINEAR)
      {
         png_uint_16p entry = png_voidcast(png_uint_16p, display->colormap);

         entry += ip * PNG_IMAGE_SAMPLE_CHANNELS(image->format);

         /* The linear 16-bit values must be pre-multiplied by the alpha channel
          * value, if less than 65535 (this is, effectively, composite on black
          * if the alpha channel is removed.)
          */
         switch (PNG_IMAGE_SAMPLE_CHANNELS(image->format))
         {
            case 4:
               entry[afirst ? 0 : 3] = (png_uint_16)alpha;
               /* FALL THROUGH */

            case 3:
               if (alpha < 65535)
               {
                  if (alpha > 0)
                  {
                     blue = (blue * alpha + 32767U)/65535U;
                     green = (green * alpha + 32767U)/65535U;
                     red = (red * alpha + 32767U)/65535U;
                  }

                  else
                     red = green = blue = 0;
               }
               entry[afirst + (2 ^ bgr)] = (png_uint_16)blue;
               entry[afirst + 1] = (png_uint_16)green;
               entry[afirst + bgr] = (png_uint_16)red;
               break;

            case 2:
               entry[1 ^ afirst] = (png_uint_16)alpha;
               /* FALL THROUGH */

            case 1:
               if (alpha < 65535)
               {
                  if (alpha > 0)
                     green = (green * alpha + 32767U)/65535U;

                  else
                     green = 0;
               }
               entry[afirst] = (png_uint_16)green;
               break;

            default:
               break;
         }
      }

      else /* output encoding is E_sRGB */
      {
         png_bytep entry = png_voidcast(png_bytep, display->colormap);

         entry += ip * PNG_IMAGE_SAMPLE_CHANNELS(image->format);

         switch (PNG_IMAGE_SAMPLE_CHANNELS(image->format))
         {
            case 4:
               entry[afirst ? 0 : 3] = (png_byte)alpha;
            case 3:
               entry[afirst + (2 ^ bgr)] = (png_byte)blue;
               entry[afirst + 1] = (png_byte)green;
               entry[afirst + bgr] = (png_byte)red;
               break;

            case 2:
               entry[1 ^ afirst] = (png_byte)alpha;
            case 1:
               entry[afirst] = (png_byte)green;
               break;

            default:
               break;
         }
      }

#     ifdef afirst
#        undef afirst
#     endif
#     ifdef bgr
#        undef bgr
#     endif
   }
}

1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822
static int
make_gray_file_colormap(png_image_read_control *display)
{
   unsigned int i;

   for (i=0; i<256; ++i)
      png_create_colormap_entry(display, i, i, i, i, 255, E_FILE);

   return i;
}

1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835 1836 1837 1838 1839 1840 1841 1842 1843 1844 1845 1846 1847 1848 1849 1850 1851 1852 1853 1854 1855 1856 1857 1858 1859 1860 1861 1862 1863 1864 1865 1866 1867 1868 1869 1870 1871 1872 1873 1874 1875 1876 1877 1878 1879 1880 1881 1882 1883 1884 1885 1886 1887 1888 1889 1890 1891 1892 1893 1894 1895 1896 1897 1898 1899 1900 1901 1902 1903 1904 1905 1906 1907 1908 1909 1910 1911 1912 1913 1914 1915 1916 1917 1918
static int
make_gray_colormap(png_image_read_control *display)
{
   unsigned int i;

   for (i=0; i<256; ++i)
      png_create_colormap_entry(display, i, i, i, i, 255, E_sRGB);

   return i;
}
#define PNG_GRAY_COLORMAP_ENTRIES 256

static int
make_ga_colormap(png_image_read_control *display)
{
   unsigned int i, a;

   /* Alpha is retained, the output will be a color-map with entries
    * selected by six levels of alpha.  One transparent entry, 6 gray
    * levels for all the intermediate alpha values, leaving 230 entries
    * for the opaque grays.  The color-map entries are the six values
    * [0..5]*51, the GA processing uses PNG_DIV51(value) to find the
    * relevant entry.
    *
    * if (alpha > 229) // opaque
    * {
    *    // The 231 entries are selected to make the math below work:
    *    base = 0;
    *    entry = (231 * gray + 128) >> 8;
    * }
    * else if (alpha < 26) // transparent
    * {
    *    base = 231;
    *    entry = 0;
    * }
    * else // partially opaque
    * {
    *    base = 226 + 6 * PNG_DIV51(alpha);
    *    entry = PNG_DIV51(gray);
    * }
    */
   i = 0;
   while (i < 231)
   {
      unsigned int gray = (i * 256 + 115) / 231;
      png_create_colormap_entry(display, i++, gray, gray, gray, 255, E_sRGB);
   }

   /* 255 is used here for the component values for consistency with the code
    * that undoes premultiplication in pngwrite.c.
    */
   png_create_colormap_entry(display, i++, 255, 255, 255, 0, E_sRGB);

   for (a=1; a<5; ++a)
   {
      unsigned int g;

      for (g=0; g<6; ++g)
         png_create_colormap_entry(display, i++, g*51, g*51, g*51, a*51,
            E_sRGB);
   }

   return i;
}

#define PNG_GA_COLORMAP_ENTRIES 256

static int
make_rgb_colormap(png_image_read_control *display)
{
   unsigned int i, r;

   /* Build a 6x6x6 opaque RGB cube */
   for (i=r=0; r<6; ++r)
   {
      unsigned int g;

      for (g=0; g<6; ++g)
      {
         unsigned int b;

         for (b=0; b<6; ++b)
            png_create_colormap_entry(display, i++, r*51, g*51, b*51, 255,
               E_sRGB);
      }
   }

   return i;
}

#define PNG_RGB_COLORMAP_ENTRIES 216

/* Return a palette index to the above palette given three 8-bit sRGB values. */
#define PNG_RGB_INDEX(r,g,b) \
   ((png_byte)(6 * (6 * PNG_DIV51(r) + PNG_DIV51(g)) + PNG_DIV51(b)))

1919
static int
1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930 1931 1932 1933 1934 1935 1936 1937 1938 1939 1940 1941 1942 1943 1944 1945 1946 1947 1948 1949 1950 1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969 1970 1971 1972 1973 1974 1975 1976 1977 1978 1979 1980 1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017
png_image_read_colormap(png_voidp argument)
{
   png_image_read_control *display =
      png_voidcast(png_image_read_control*, argument);
   const png_imagep image = display->image;

   const png_structrp png_ptr = image->opaque->png_ptr;
   const png_uint_32 output_format = image->format;
   const int output_encoding = (output_format & PNG_FORMAT_FLAG_LINEAR) ?
      E_LINEAR : E_sRGB;

   unsigned int cmap_entries;
   unsigned int output_processing;        /* Output processing option */
   unsigned int data_encoding = E_NOTSET; /* Encoding libpng must produce */

   /* Background information; the background color and the index of this color
    * in the color-map if it exists (else 256).
    */
   unsigned int background_index = 256;
   png_uint_32 back_r, back_g, back_b;

   /* Flags to accumulate things that need to be done to the input. */
   int expand_tRNS = 0;

   /* Exclude the NYI feature of compositing onto a color-mapped buffer; it is
    * very difficult to do, the results look awful, and it is difficult to see
    * what possible use it is because the application can't control the
    * color-map.
    */
   if (((png_ptr->color_type & PNG_COLOR_MASK_ALPHA) != 0 ||
         png_ptr->num_trans > 0) /* alpha in input */ &&
      ((output_format & PNG_FORMAT_FLAG_ALPHA) == 0) /* no alpha in output */)
   {
      if (output_encoding == E_LINEAR) /* compose on black */
         back_b = back_g = back_r = 0;

      else if (display->background == NULL /* no way to remove it */)
         png_error(png_ptr,
            "a background color must be supplied to remove alpha/transparency");

      /* Get a copy of the background color (this avoids repeating the checks
       * below.)  The encoding is 8-bit sRGB or 16-bit linear, depending on the
       * output format.
       */
      else
      {
         back_g = display->background->green;
         if (output_format & PNG_FORMAT_FLAG_COLOR)
         {
            back_r = display->background->red;
            back_b = display->background->blue;
         }
         else
            back_b = back_r = back_g;
      }
   }

   else if (output_encoding == E_LINEAR)
      back_b = back_r = back_g = 65535;

   else
      back_b = back_r = back_g = 255;

   /* Decide what to do based on the PNG color type of the input data.  The
    * utility function png_create_colormap_entry deals with most aspects of the
    * output transformations; this code works out how to produce bytes of
    * color-map entries from the original format.
    */
   switch (png_ptr->color_type)
   {
      case PNG_COLOR_TYPE_GRAY:
         if (png_ptr->bit_depth <= 8)
         {
            /* There at most 256 colors in the output, regardless of
             * transparency.
             */
            unsigned int step, i, val, trans = 256/*ignore*/, back_alpha = 0;

            cmap_entries = 1U << png_ptr->bit_depth;
            if (cmap_entries > image->colormap_entries)
               png_error(png_ptr, "gray[8] color-map: too few entries");

            step = 255 / (cmap_entries - 1);
            output_processing = PNG_CMAP_NONE;

            /* If there is a tRNS chunk then this either selects a transparent
             * value or, if the output has no alpha, the background color.
             */
            if (png_ptr->num_trans > 0)
            {
               trans = png_ptr->trans_color.gray;

               if ((output_format & PNG_FORMAT_FLAG_ALPHA) == 0)
                  back_alpha = output_encoding == E_LINEAR ? 65535 : 255;
            }

            /* png_create_colormap_entry just takes an RGBA and writes the
             * corresponding color-map entry using the format from 'image',
2018
             * including the required conversion to sRGB or linear as
2019 2020 2021 2022 2023 2024 2025 2026 2027 2028 2029 2030 2031 2032 2033 2034 2035 2036 2037 2038 2039 2040 2041 2042 2043 2044 2045 2046 2047 2048 2049 2050 2051 2052 2053 2054 2055 2056 2057 2058 2059 2060 2061 2062 2063 2064 2065 2066 2067 2068 2069 2070 2071 2072 2073 2074 2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092 2093 2094 2095 2096 2097 2098 2099 2100 2101 2102 2103 2104 2105 2106 2107 2108 2109 2110 2111 2112 2113 2114 2115 2116 2117 2118 2119 2120 2121 2122 2123 2124 2125 2126 2127 2128 2129 2130 2131 2132 2133 2134 2135 2136 2137 2138 2139 2140 2141 2142 2143 2144 2145 2146 2147 2148 2149 2150 2151 2152 2153 2154 2155 2156 2157 2158 2159 2160 2161 2162 2163 2164 2165 2166 2167 2168 2169 2170 2171 2172 2173 2174 2175 2176 2177 2178 2179 2180 2181 2182 2183 2184 2185 2186 2187 2188 2189 2190 2191 2192 2193 2194 2195 2196 2197 2198 2199 2200 2201 2202 2203 2204 2205 2206 2207 2208 2209 2210 2211 2212 2213 2214 2215 2216 2217 2218 2219 2220 2221 2222 2223 2224 2225 2226 2227 2228 2229 2230 2231 2232 2233 2234 2235 2236 2237 2238 2239 2240 2241 2242 2243 2244 2245 2246 2247 2248 2249 2250 2251 2252 2253 2254 2255 2256 2257 2258 2259 2260 2261 2262 2263 2264 2265 2266 2267 2268 2269 2270 2271 2272 2273 2274 2275 2276 2277 2278 2279 2280 2281 2282 2283 2284 2285 2286 2287 2288 2289 2290 2291 2292 2293 2294 2295 2296 2297 2298 2299 2300 2301 2302 2303 2304 2305 2306 2307 2308 2309 2310 2311 2312 2313 2314 2315 2316 2317 2318 2319 2320 2321 2322 2323 2324 2325 2326 2327 2328 2329 2330 2331 2332 2333 2334 2335 2336 2337 2338 2339 2340 2341 2342 2343 2344 2345 2346 2347 2348 2349 2350 2351 2352
             * appropriate.  The input values are always either sRGB (if the
             * gamma correction flag is 0) or 0..255 scaled file encoded values
             * (if the function must gamma correct them).
             */
            for (i=val=0; i<cmap_entries; ++i, val += step)
            {
               /* 'i' is a file value.  While this will result in duplicated
                * entries for 8-bit non-sRGB encoded files it is necessary to
                * have non-gamma corrected values to do tRNS handling.
                */
               if (i != trans)
                  png_create_colormap_entry(display, i, val, val, val, 255,
                     E_FILE/*8-bit with file gamma*/);

               /* Else this entry is transparent.  The colors don't matter if
                * there is an alpha channel (back_alpha == 0), but it does no
                * harm to pass them in; the values are not set above so this
                * passes in white.
                *
                * NOTE: this preserves the full precision of the application
                * supplied background color when it is used.
                */
               else
                  png_create_colormap_entry(display, i, back_r, back_g, back_b,
                     back_alpha, output_encoding);
            }

            /* We need libpng to preserve the original encoding. */
            data_encoding = E_FILE;

            /* The rows from libpng, while technically gray values, are now also
             * color-map indicies; however, they may need to be expanded to 1
             * byte per pixel.  This is what png_set_packing does (i.e., it
             * unpacks the bit values into bytes.)
             */
            if (png_ptr->bit_depth < 8)
               png_set_packing(png_ptr);
         }

         else /* bit depth is 16 */
         {
            /* The 16-bit input values can be converted directly to 8-bit gamma
             * encoded values; however, if a tRNS chunk is present 257 color-map
             * entries are required.  This means that the extra entry requires
             * special processing; add an alpha channel, sacrifice gray level
             * 254 and convert transparent (alpha==0) entries to that.
             *
             * Use libpng to chop the data to 8 bits.  Convert it to sRGB at the
             * same time to minimize quality loss.  If a tRNS chunk is present
             * this means libpng must handle it too; otherwise it is impossible
             * to do the exact match on the 16-bit value.
             *
             * If the output has no alpha channel *and* the background color is
             * gray then it is possible to let libpng handle the substitution by
             * ensuring that the corresponding gray level matches the background
             * color exactly.
             */
            data_encoding = E_sRGB;

            if (PNG_GRAY_COLORMAP_ENTRIES > image->colormap_entries)
               png_error(png_ptr, "gray[16] color-map: too few entries");

            cmap_entries = make_gray_colormap(display);

            if (png_ptr->num_trans > 0)
            {
               unsigned int back_alpha;

               if (output_format & PNG_FORMAT_FLAG_ALPHA)
                  back_alpha = 0;

               else
               {
                  if (back_r == back_g && back_g == back_b)
                  {
                     /* Background is gray; no special processing will be
                      * required.
                      */
                     png_color_16 c;
                     png_uint_32 gray = back_g;

                     if (output_encoding == E_LINEAR)
                     {
                        gray = PNG_sRGB_FROM_LINEAR(gray * 255);

                        /* And make sure the corresponding palette entry
                         * matches.
                         */
                        png_create_colormap_entry(display, gray, back_g, back_g,
                           back_g, 65535, E_LINEAR);
                     }

                     /* The background passed to libpng, however, must be the
                      * sRGB value.
                      */
                     c.index = 0; /*unused*/
                     c.gray = c.red = c.green = c.blue = (png_uint_16)gray;

                     /* NOTE: does this work without expanding tRNS to alpha?
                      * It should be the color->gray case below apparently
                      * doesn't.
                      */
                     png_set_background_fixed(png_ptr, &c,
                        PNG_BACKGROUND_GAMMA_SCREEN, 0/*need_expand*/,
                        0/*gamma: not used*/);

                     output_processing = PNG_CMAP_NONE;
                     break;
                  }

                  back_alpha = output_encoding == E_LINEAR ? 65535 : 255;
               }

               /* output_processing means that the libpng-processed row will be
                * 8-bit GA and it has to be processing to single byte color-map
                * values.  Entry 254 is replaced by either a completely
                * transparent entry or by the background color at full
                * precision (and the background color is not a simple gray leve
                * in this case.)
                */
               expand_tRNS = 1;
               output_processing = PNG_CMAP_TRANS;
               background_index = 254;

               /* And set (overwrite) color-map entry 254 to the actual
                * background color at full precision.
                */
               png_create_colormap_entry(display, 254, back_r, back_g, back_b,
                  back_alpha, output_encoding);
            }

            else
               output_processing = PNG_CMAP_NONE;
         }
         break;

      case PNG_COLOR_TYPE_GRAY_ALPHA:
         /* 8-bit or 16-bit PNG with two channels - gray and alpha.  A minimum
          * of 65536 combinations.  If, however, the alpha channel is to be
          * removed there are only 256 possibilities if the background is gray.
          * (Otherwise there is a subset of the 65536 possibilities defined by
          * the triangle between black, white and the background color.)
          *
          * Reduce 16-bit files to 8-bit and sRGB encode the result.  No need to
          * worry about tRNS matching - tRNS is ignored if there is an alpha
          * channel.
          */
         data_encoding = E_sRGB;

         if (output_format & PNG_FORMAT_FLAG_ALPHA)
         {
            if (PNG_GA_COLORMAP_ENTRIES > image->colormap_entries)
               png_error(png_ptr, "gray+alpha color-map: too few entries");

            cmap_entries = make_ga_colormap(display);

            background_index = PNG_CMAP_GA_BACKGROUND;
            output_processing = PNG_CMAP_GA;
         }

         else /* alpha is removed */
         {
            /* Alpha must be removed as the PNG data is processed when the
             * background is a color because the G and A channels are
             * independent and the vector addition (non-parallel vectors) is a
             * 2-D problem.
             *
             * This can be reduced to the same algorithm as above by making a
             * colormap containing gray levels (for the opaque grays), a
             * background entry (for a transparent pixel) and a set of four six
             * level color values, one set for each intermediate alpha value.
             * See the comments in make_ga_colormap for how this works in the
             * per-pixel processing.
             *
             * If the background is gray, however, we only need a 256 entry gray
             * level color map.  It is sufficient to make the entry generated
             * for the background color be exactly the color specified.
             */
            if ((output_format & PNG_FORMAT_FLAG_COLOR) == 0 ||
               (back_r == back_g && back_g == back_b))
            {
               /* Background is gray; no special processing will be required. */
               png_color_16 c;
               png_uint_32 gray = back_g;

               if (PNG_GRAY_COLORMAP_ENTRIES > image->colormap_entries)
                  png_error(png_ptr, "gray-alpha color-map: too few entries");

               cmap_entries = make_gray_colormap(display);

               if (output_encoding == E_LINEAR)
               {
                  gray = PNG_sRGB_FROM_LINEAR(gray * 255);

                  /* And make sure the corresponding palette entry matches. */
                  png_create_colormap_entry(display, gray, back_g, back_g,
                     back_g, 65535, E_LINEAR);
               }

               /* The background passed to libpng, however, must be the sRGB
                * value.
                */
               c.index = 0; /*unused*/
               c.gray = c.red = c.green = c.blue = (png_uint_16)gray;

               png_set_background_fixed(png_ptr, &c,
                  PNG_BACKGROUND_GAMMA_SCREEN, 0/*need_expand*/,
                  0/*gamma: not used*/);

               output_processing = PNG_CMAP_NONE;
            }

            else
            {
               png_uint_32 i, a;

               /* This is the same as png_make_ga_colormap, above, except that
                * the entries are all opaque.
                */
               if (PNG_GA_COLORMAP_ENTRIES > image->colormap_entries)
                  png_error(png_ptr, "ga-alpha color-map: too few entries");

               i = 0;
               while (i < 231)
               {
                  png_uint_32 gray = (i * 256 + 115) / 231;
                  png_create_colormap_entry(display, i++, gray, gray, gray,
                     255, E_sRGB);
               }

               /* NOTE: this preserves the full precision of the application
                * background color.
                */
               background_index = i;
               png_create_colormap_entry(display, i++, back_r, back_g, back_b,
                  output_encoding == E_LINEAR ? 65535U : 255U, output_encoding);

               /* For non-opaque input composite on the sRGB background - this
                * requires inverting the encoding for each component.  The input
                * is still converted to the sRGB encoding because this is a
                * reasonable approximate to the logarithmic curve of human
                * visual sensitivity, at least over the narrow range which PNG
                * represents.  Consequently 'G' is always sRGB encoded, while
                * 'A' is linear.  We need the linear background colors.
                */
               if (output_encoding == E_sRGB) /* else already linear */
               {
                  /* This may produce a value not exactly matching the
                   * background, but that's ok because these numbers are only
                   * used when alpha != 0
                   */
                  back_r = png_sRGB_table[back_r];
                  back_g = png_sRGB_table[back_g];
                  back_b = png_sRGB_table[back_b];
               }

               for (a=1; a<5; ++a)
               {
                  unsigned int g;

                  /* PNG_sRGB_FROM_LINEAR expects a 16-bit linear value scaled
                   * by an 8-bit alpha value (0..255).
                   */
                  png_uint_32 alpha = 51 * a;
                  png_uint_32 back_rx = (255-alpha) * back_r;
                  png_uint_32 back_gx = (255-alpha) * back_g;
                  png_uint_32 back_bx = (255-alpha) * back_b;

                  for (g=0; g<6; ++g)
                  {
                     png_uint_32 gray = png_sRGB_table[g*51] * alpha;

                     png_create_colormap_entry(display, i++,
                        PNG_sRGB_FROM_LINEAR(gray + back_rx),
                        PNG_sRGB_FROM_LINEAR(gray + back_gx),
                        PNG_sRGB_FROM_LINEAR(gray + back_bx), 255, E_sRGB);
                  }
               }

               cmap_entries = i;
               output_processing = PNG_CMAP_GA;
            }
         }
         break;

      case PNG_COLOR_TYPE_RGB:
      case PNG_COLOR_TYPE_RGB_ALPHA:
         /* Exclude the case where the output is gray; we can always handle this
          * with the cases above.
          */
         if ((output_format & PNG_FORMAT_FLAG_COLOR) == 0)
         {
            /* The color-map will be grayscale, so we may as well convert the
             * input RGB values to a simple grayscale and use the grayscale
             * code above.
             *
             * NOTE: calling this apparently damages the recognition of the
             * transparent color in background color handling; call
             * png_set_tRNS_to_alpha before png_set_background_fixed.
             */
            png_set_rgb_to_gray_fixed(png_ptr, PNG_ERROR_ACTION_NONE, -1,
               -1);
            data_encoding = E_sRGB;

            /* The output will now be one or two 8-bit gray or gray+alpha
             * channels.  The more complex case arises when the input has alpha.
             */
            if ((png_ptr->color_type == PNG_COLOR_TYPE_RGB_ALPHA ||
               png_ptr->num_trans > 0) &&
               (output_format & PNG_FORMAT_FLAG_ALPHA) != 0)
            {
               /* Both input and output have an alpha channel, so no background
                * processing is required; just map the GA bytes to the right
                * color-map entry.
                */
               expand_tRNS = 1;

               if (PNG_GA_COLORMAP_ENTRIES > image->colormap_entries)
                  png_error(png_ptr, "rgb[ga] color-map: too few entries");

               cmap_entries = make_ga_colormap(display);
               background_index = PNG_CMAP_GA_BACKGROUND;
               output_processing = PNG_CMAP_GA;
            }

            else
            {
               /* Either the input or the output has no alpha channel, so there
                * will be no non-opaque pixels in the color-map; it will just be
                * grayscale.
                */
               if (PNG_GRAY_COLORMAP_ENTRIES > image->colormap_entries)
                  png_error(png_ptr, "rgb[gray] color-map: too few entries");

2353 2354 2355 2356 2357 2358 2359 2360 2361
               /* Ideally this code would use libpng to do the gamma correction,
                * but if an input alpha channel is to be removed we will hit the
                * libpng bug in gamma+compose+rgb-to-gray (the double gamma
                * correction bug).  Fix this by dropping the gamma correction in
                * this case and doing it in the palette; this will result in
                * duplicate palette entries, but that's better than the
                * alternative of double gamma correction.
                */
               if ((png_ptr->color_type == PNG_COLOR_TYPE_RGB_ALPHA ||
2362 2363
                  png_ptr->num_trans > 0) &&
                  png_gamma_not_sRGB(png_ptr->colorspace.gamma))
2364 2365 2366 2367 2368 2369 2370
               {
                  cmap_entries = make_gray_file_colormap(display);
                  data_encoding = E_FILE;
               }

               else
                  cmap_entries = make_gray_colormap(display);
2371 2372 2373 2374 2375 2376 2377 2378 2379 2380 2381 2382 2383 2384

               /* But if the input has alpha or transparency it must be removed
                */
               if (png_ptr->color_type == PNG_COLOR_TYPE_RGB_ALPHA ||
                  png_ptr->num_trans > 0)
               {
                  png_color_16 c;
                  png_uint_32 gray = back_g;

                  /* We need to ensure that the application background exists in
                   * the colormap and that completely transparent pixels map to
                   * it.  Achieve this simply by ensuring that the entry
                   * selected for the background really is the background color.
                   */
2385 2386 2387 2388 2389 2390 2391 2392 2393 2394 2395
                  if (data_encoding == E_FILE) /* from the fixup above */
                  {
                     /* The app supplied a gray which is in output_encoding, we
                      * need to convert it to a value of the input (E_FILE)
                      * encoding then set this palette entry to the required
                      * output encoding.
                      */
                     if (output_encoding == E_sRGB)
                        gray = png_sRGB_table[gray]; /* now E_LINEAR */

                     gray = PNG_DIV257(png_gamma_16bit_correct(gray,
2396
                        png_ptr->colorspace.gamma)); /* now E_FILE */
2397 2398 2399 2400 2401 2402 2403 2404 2405

                     /* And make sure the corresponding palette entry contains
                      * exactly the required sRGB value.
                      */
                     png_create_colormap_entry(display, gray, back_g, back_g,
                        back_g, 0/*unused*/, output_encoding);
                  }

                  else if (output_encoding == E_LINEAR)
2406 2407 2408 2409 2410 2411
                  {
                     gray = PNG_sRGB_FROM_LINEAR(gray * 255);

                     /* And make sure the corresponding palette entry matches.
                      */
                     png_create_colormap_entry(display, gray, back_g, back_g,
2412
                        back_g, 0/*unused*/, E_LINEAR);
2413 2414
                  }

2415 2416
                  /* The background passed to libpng, however, must be the
                   * output (normally sRGB) value.
2417 2418 2419 2420 2421 2422 2423 2424 2425 2426 2427 2428 2429 2430 2431 2432 2433 2434 2435 2436 2437 2438 2439 2440 2441 2442 2443 2444 2445 2446 2447 2448 2449 2450 2451 2452 2453 2454 2455 2456 2457 2458 2459 2460 2461 2462 2463 2464 2465 2466 2467 2468 2469 2470 2471 2472 2473 2474 2475 2476 2477 2478 2479 2480 2481 2482 2483 2484 2485 2486 2487 2488 2489 2490 2491 2492 2493 2494 2495 2496 2497 2498 2499 2500 2501 2502 2503 2504 2505 2506 2507 2508 2509 2510 2511 2512 2513 2514 2515 2516 2517 2518 2519 2520 2521 2522 2523 2524 2525 2526 2527 2528 2529
                   */
                  c.index = 0; /*unused*/
                  c.gray = c.red = c.green = c.blue = (png_uint_16)gray;

                  /* NOTE: the following is apparently a bug in libpng. Without
                   * it the transparent color recognition in
                   * png_set_background_fixed seems to go wrong.
                   */
                  expand_tRNS = 1;
                  png_set_background_fixed(png_ptr, &c,
                     PNG_BACKGROUND_GAMMA_SCREEN, 0/*need_expand*/,
                     0/*gamma: not used*/);
               }

               output_processing = PNG_CMAP_NONE;
            }
         }

         else /* output is color */
         {
            /* We could use png_quantize here so long as there is no transparent
             * color or alpha; png_quantize ignores alpha.  Easier overall just
             * to do it once and using PNG_DIV51 on the 6x6x6 reduced RGB cube.
             * Consequently we always want libpng to produce sRGB data.
             */
            data_encoding = E_sRGB;

            /* Is there any transparency or alpha? */
            if (png_ptr->color_type == PNG_COLOR_TYPE_RGB_ALPHA ||
               png_ptr->num_trans > 0)
            {
               /* Is there alpha in the output too?  If so all four channels are
                * processed into a special RGB cube with alpha support.
                */
               if (output_format & PNG_FORMAT_FLAG_ALPHA)
               {
                  png_uint_32 r;

                  if (PNG_RGB_COLORMAP_ENTRIES+1+27 > image->colormap_entries)
                     png_error(png_ptr, "rgb+alpha color-map: too few entries");

                  cmap_entries = make_rgb_colormap(display);

                  /* Add a transparent entry. */
                  png_create_colormap_entry(display, cmap_entries, 255, 255,
                     255, 0, E_sRGB);

                  /* This is stored as the background index for the processing
                   * algorithm.
                   */
                  background_index = cmap_entries++;

                  /* Add 27 r,g,b entries each with alpha 0.5. */
                  for (r=0; r<256; r = (r << 1) | 0x7f)
                  {
                     png_uint_32 g;

                     for (g=0; g<256; g = (g << 1) | 0x7f)
                     {
                        png_uint_32 b;

                        /* This generates components with the values 0, 127 and
                         * 255
                         */
                        for (b=0; b<256; b = (b << 1) | 0x7f)
                           png_create_colormap_entry(display, cmap_entries++,
                              r, g, b, 128, E_sRGB);
                     }
                  }

                  expand_tRNS = 1;
                  output_processing = PNG_CMAP_RGB_ALPHA;
               }

               else
               {
                  /* Alpha/transparency must be removed.  The background must
                   * exist in the color map (achieved by setting adding it after
                   * the 666 color-map).  If the standard processing code will
                   * pick up this entry automatically that's all that is
                   * required; libpng can be called to do the background
                   * processing.
                   */
                  unsigned int sample_size =
                     PNG_IMAGE_SAMPLE_SIZE(output_format);
                  png_uint_32 r, g, b; /* sRGB background */

                  if (PNG_RGB_COLORMAP_ENTRIES+1+27 > image->colormap_entries)
                     png_error(png_ptr, "rgb-alpha color-map: too few entries");

                  cmap_entries = make_rgb_colormap(display);

                  png_create_colormap_entry(display, cmap_entries, back_r,
                        back_g, back_b, 0/*unused*/, output_encoding);

                  if (output_encoding == E_LINEAR)
                  {
                     r = PNG_sRGB_FROM_LINEAR(back_r * 255);
                     g = PNG_sRGB_FROM_LINEAR(back_g * 255);
                     b = PNG_sRGB_FROM_LINEAR(back_b * 255);
                  }

                  else
                  {
                     r = back_r;
                     g = back_g;
                     b = back_g;
                  }

                  /* Compare the newly-created color-map entry with the one the
                   * PNG_CMAP_RGB algorithm will use.  If the two entries don't
                   * match, add the new one and set this as the background index.
                   */
2530
                  if (png_memcmp((png_const_bytep)display->colormap +
2531 2532 2533 2534 2535 2536 2537 2538 2539 2540 2541 2542 2543 2544 2545 2546 2547 2548 2549 2550 2551 2552 2553 2554 2555 2556 2557 2558 2559 2560 2561 2562 2563 2564 2565 2566 2567 2568 2569 2570 2571 2572 2573 2574 2575 2576 2577 2578 2579 2580 2581 2582 2583 2584 2585 2586 2587 2588 2589 2590 2591 2592 2593 2594 2595 2596 2597 2598 2599 2600 2601 2602 2603 2604 2605 2606 2607 2608 2609 2610 2611 2612 2613 2614 2615 2616 2617 2618 2619 2620 2621 2622 2623 2624 2625 2626 2627 2628 2629 2630 2631 2632 2633 2634 2635 2636 2637 2638 2639 2640 2641 2642 2643 2644 2645 2646
                        sample_size * cmap_entries,
                     (png_const_bytep)display->colormap +
                        sample_size * PNG_RGB_INDEX(r,g,b),
                     sample_size) != 0)
                  {
                     /* The background color must be added. */
                     background_index = cmap_entries++;

                     /* Add 27 r,g,b entries each with created by composing with
                      * the background at alpha 0.5.
                      */
                     for (r=0; r<256; r = (r << 1) | 0x7f)
                     {
                        for (g=0; g<256; g = (g << 1) | 0x7f)
                        {
                           /* This generates components with the values 0, 127
                            * and 255
                            */
                           for (b=0; b<256; b = (b << 1) | 0x7f)
                              png_create_colormap_entry(display, cmap_entries++,
                                 png_colormap_compose(display, r, E_sRGB, 128,
                                    back_r, output_encoding),
                                 png_colormap_compose(display, g, E_sRGB, 128,
                                    back_g, output_encoding),
                                 png_colormap_compose(display, b, E_sRGB, 128,
                                    back_b, output_encoding),
                                 0/*unused*/, output_encoding);
                        }
                     }

                     expand_tRNS = 1;
                     output_processing = PNG_CMAP_RGB_ALPHA;
                  }

                  else /* background color is in the standard color-map */
                  {
                     png_color_16 c;

                     c.index = 0; /*unused*/
                     c.red = (png_uint_16)back_r;
                     c.gray = c.green = (png_uint_16)back_g;
                     c.blue = (png_uint_16)back_b;

                     png_set_background_fixed(png_ptr, &c,
                        PNG_BACKGROUND_GAMMA_SCREEN, 0/*need_expand*/,
                        0/*gamma: not used*/);

                     output_processing = PNG_CMAP_RGB;
                  }
               }
            }

            else /* no alpha or transparency in the input */
            {
               /* Alpha in the output is irrelevant, simply map the opaque input
                * pixels to the 6x6x6 color-map.
                */
               if (PNG_RGB_COLORMAP_ENTRIES > image->colormap_entries)
                  png_error(png_ptr, "rgb color-map: too few entries");

               cmap_entries = make_rgb_colormap(display);
               output_processing = PNG_CMAP_RGB;
            }
         }
         break;

      case PNG_COLOR_TYPE_PALETTE:
         /* It's already got a color-map.  It may be necessary to eliminate the
          * tRNS entries though.
          */
         {
            unsigned int num_trans = png_ptr->num_trans;
            png_const_bytep trans = num_trans > 0 ? png_ptr->trans_alpha : NULL;
            png_const_colorp colormap = png_ptr->palette;
            const int do_background = trans != NULL &&
               (output_format & PNG_FORMAT_FLAG_ALPHA) == 0;
            unsigned int i;

            /* Just in case: */
            if (trans == NULL)
               num_trans = 0;

            output_processing = PNG_CMAP_NONE;
            data_encoding = E_FILE; /* Don't change from color-map indicies */
            cmap_entries = png_ptr->num_palette;
            if (cmap_entries > 256)
               cmap_entries = 256;

            if (cmap_entries > image->colormap_entries)
               png_error(png_ptr, "palette color-map: too few entries");

            for (i=0; i < cmap_entries; ++i)
            {
               if (do_background && i < num_trans && trans[i] < 255)
               {
                  if (trans[i] == 0)
                     png_create_colormap_entry(display, i, back_r, back_g,
                        back_b, 0, output_encoding);

                  else
                  {
                     /* Must compose the PNG file color in the color-map entry
                      * on the sRGB color in 'back'.
                      */
                     png_create_colormap_entry(display, i,
                        png_colormap_compose(display, colormap[i].red, E_FILE,
                           trans[i], back_r, output_encoding),
                        png_colormap_compose(display, colormap[i].green, E_FILE,
                           trans[i], back_g, output_encoding),
                        png_colormap_compose(display, colormap[i].blue, E_FILE,
                           trans[i], back_b, output_encoding),
                        output_encoding == E_LINEAR ? trans[i] * 257U :
                           trans[i],
                        output_encoding);
                  }
               }
2647

2648 2649 2650 2651 2652 2653 2654 2655 2656 2657 2658 2659 2660 2661 2662 2663 2664 2665 2666 2667 2668 2669 2670 2671 2672 2673 2674 2675 2676 2677 2678 2679 2680 2681
               else
                  png_create_colormap_entry(display, i, colormap[i].red,
                     colormap[i].green, colormap[i].blue,
                     i < num_trans ? trans[i] : 255U, E_FILE/*8-bit*/);
            }

            /* The PNG data may have indicies packed in fewer than 8 bits, it
             * must be expanded if so.
             */
            if (png_ptr->bit_depth < 8)
               png_set_packing(png_ptr);
         }
         break;

      default:
         png_error(png_ptr, "invalid PNG color type");
         /*NOT REACHED*/
         break;
   }

   /* Now deal with the output processing */
   if (expand_tRNS && png_ptr->num_trans > 0 &&
      (png_ptr->color_type & PNG_COLOR_MASK_ALPHA) == 0)
      png_set_tRNS_to_alpha(png_ptr);

   switch (data_encoding)
   {
      default:
         png_error(png_ptr, "bad data option (internal error)");
         break;

      case E_sRGB:
         /* Change to 8-bit sRGB */
         png_set_alpha_mode_fixed(png_ptr, PNG_ALPHA_PNG, PNG_GAMMA_sRGB);
2682 2683 2684
         /* FALL THROUGH */

      case E_FILE:
2685 2686 2687 2688 2689 2690 2691 2692 2693 2694 2695 2696 2697 2698 2699 2700 2701 2702 2703 2704 2705 2706 2707 2708 2709 2710 2711 2712 2713 2714 2715 2716 2717 2718 2719 2720 2721 2722 2723 2724 2725 2726 2727 2728 2729 2730 2731 2732 2733 2734 2735 2736 2737 2738 2739 2740 2741 2742 2743 2744 2745 2746 2747 2748 2749 2750 2751 2752 2753 2754 2755 2756 2757 2758 2759 2760 2761 2762 2763 2764 2765 2766 2767 2768
         if (png_ptr->bit_depth > 8)
            png_set_scale_16(png_ptr);
         break;
   }

   if (cmap_entries > 256 || cmap_entries > image->colormap_entries)
      png_error(png_ptr, "color map overflow (BAD internal error)");

   image->colormap_entries = cmap_entries;

   /* Double check using the recorded background index */
   switch (output_processing)
   {
      case PNG_CMAP_NONE:
         if (background_index != PNG_CMAP_NONE_BACKGROUND)
            goto bad_background;
         break;

      case PNG_CMAP_GA:
         if (background_index != PNG_CMAP_GA_BACKGROUND)
            goto bad_background;
         break;

      case PNG_CMAP_TRANS:
         if (background_index >= cmap_entries ||
            background_index != PNG_CMAP_TRANS_BACKGROUND)
            goto bad_background;
         break;

      case PNG_CMAP_RGB:
         if (background_index != PNG_CMAP_RGB_BACKGROUND)
            goto bad_background;
         break;

      case PNG_CMAP_RGB_ALPHA:
         if (background_index != PNG_CMAP_RGB_ALPHA_BACKGROUND)
            goto bad_background;
         break;

      default:
         png_error(png_ptr, "bad processing option (internal error)");

      bad_background:
         png_error(png_ptr, "bad background index (internal error)");
   }

   display->colormap_processing = output_processing;

   return 1/*ok*/;
}

/* The final part of the color-map read called from png_image_finish_read. */
static int
png_image_read_and_map(png_voidp argument)
{
   png_image_read_control *display = png_voidcast(png_image_read_control*,
      argument);
   png_imagep image = display->image;
   png_structrp png_ptr = image->opaque->png_ptr;
   int passes;

   /* Called when the libpng data must be transformed into the color-mapped
    * form.  There is a local row buffer in display->local and this routine must
    * do the interlace handling.
    */
   switch (png_ptr->interlaced)
   {
      case PNG_INTERLACE_NONE:
         passes = 1;
         break;

      case PNG_INTERLACE_ADAM7:
         passes = PNG_INTERLACE_ADAM7_PASSES;
         break;

      default:
         passes = 0;
         png_error(png_ptr, "unknown interlace type");
   }

   {
      png_uint_32  height = image->height;
      png_uint_32  width = image->width;
      int          proc = display->colormap_processing;
2769
      png_bytep    first_row = png_voidcast(png_bytep, display->first_row);
2770 2771 2772 2773 2774 2775 2776 2777 2778 2779 2780 2781 2782 2783 2784 2785 2786 2787 2788 2789 2790 2791 2792 2793 2794 2795 2796 2797 2798
      ptrdiff_t    step_row = display->row_bytes;
      int pass;

      for (pass = 0; pass < passes; ++pass)
      {
         unsigned int     startx, stepx, stepy;
         png_uint_32      y;

         if (png_ptr->interlaced == PNG_INTERLACE_ADAM7)
         {
            /* The row may be empty for a short image: */
            if (PNG_PASS_COLS(width, pass) == 0)
               continue;

            startx = PNG_PASS_START_COL(pass);
            stepx = PNG_PASS_COL_OFFSET(pass);
            y = PNG_PASS_START_ROW(pass);
            stepy = PNG_PASS_ROW_OFFSET(pass);
         }

         else
         {
            y = 0;
            startx = 0;
            stepx = stepy = 1;
         }

         for (; y<height; y += stepy)
         {
2799
            png_bytep inrow = png_voidcast(png_bytep, display->local_row);
2800 2801 2802 2803 2804 2805 2806 2807 2808 2809 2810 2811 2812 2813 2814 2815 2816 2817 2818 2819 2820 2821 2822 2823 2824 2825 2826 2827 2828 2829 2830 2831 2832 2833 2834 2835 2836 2837 2838 2839 2840 2841 2842 2843 2844 2845 2846 2847 2848 2849 2850 2851 2852 2853 2854 2855 2856 2857 2858 2859 2860 2861 2862 2863 2864 2865 2866 2867 2868 2869 2870 2871 2872 2873 2874 2875 2876 2877 2878 2879 2880 2881 2882 2883 2884 2885 2886 2887 2888 2889 2890 2891 2892 2893 2894 2895 2896 2897 2898 2899 2900 2901 2902 2903 2904 2905 2906 2907 2908 2909 2910 2911 2912 2913 2914 2915 2916 2917 2918 2919 2920 2921 2922 2923
            png_bytep outrow = first_row + y * step_row;
            png_const_bytep end_row = outrow + width;

            /* Read read the libpng data into the temporary buffer. */
            png_read_row(png_ptr, inrow, NULL);

            /* Now process the row according to the processing option, note
             * that the caller verifies that the format of the libpng output
             * data is as required.
             */
            outrow += startx;
            switch (proc)
            {
               case PNG_CMAP_GA:
                  for (; outrow < end_row; outrow += stepx)
                  {
                     /* The data is always in the PNG order */
                     unsigned int gray = *inrow++;
                     unsigned int alpha = *inrow++;
                     unsigned int entry;

                     /* NOTE: this code is copied as a comment in
                      * make_ga_colormap above.  Please update the
                      * comment if you change this code!
                      */
                     if (alpha > 229) /* opaque */
                     {
                        entry = (231 * gray + 128) >> 8;
                     }
                     else if (alpha < 26) /* transparent */
                     {
                        entry = 231;
                     }
                     else /* partially opaque */
                     {
                        entry = 226 + 6 * PNG_DIV51(alpha) + PNG_DIV51(gray);
                     }

                     *outrow = (png_byte)entry;
                  }
                  break;

               case PNG_CMAP_TRANS:
                  for (; outrow < end_row; outrow += stepx)
                  {
                     png_byte gray = *inrow++;
                     png_byte alpha = *inrow++;

                     if (alpha == 0)
                        *outrow = PNG_CMAP_TRANS_BACKGROUND;

                     else if (gray != PNG_CMAP_TRANS_BACKGROUND)
                        *outrow = gray;

                     else
                        *outrow = (png_byte)(PNG_CMAP_TRANS_BACKGROUND+1);
                  }
                  break;

               case PNG_CMAP_RGB:
                  for (; outrow < end_row; outrow += stepx)
                  {
                     *outrow = PNG_RGB_INDEX(inrow[0], inrow[1], inrow[2]);
                     inrow += 3;
                  }
                  break;

               case PNG_CMAP_RGB_ALPHA:
                  for (; outrow < end_row; outrow += stepx)
                  {
                     unsigned int alpha = inrow[3];

                     /* Because the alpha entries only hold alpha==0.5 values
                      * split the processing at alpha==0.25 (64) and 0.75
                      * (196).
                      */

                     if (alpha >= 196)
                        *outrow = PNG_RGB_INDEX(inrow[0], inrow[1],
                           inrow[2]);

                     else if (alpha < 64)
                        *outrow = PNG_CMAP_RGB_ALPHA_BACKGROUND;

                     else
                     {
                        /* Likewise there are three entries for each of r, g
                         * and b.  We could select the entry by popcount on
                         * the top two bits on those architectures that
                         * support it, this is what the code below does,
                         * crudely.
                         */
                        unsigned int back_i = PNG_CMAP_RGB_ALPHA_BACKGROUND+1;

                        /* Here are how the values map:
                         *
                         * 0x00 .. 0x3f -> 0
                         * 0x40 .. 0xbf -> 1
                         * 0xc0 .. 0xff -> 2
                         *
                         * So, as above with the explicit alpha checks, the
                         * breakpoints are at 64 and 196.
                         */
                        if (inrow[0] & 0x80) back_i += 9; /* red */
                        if (inrow[0] & 0x40) back_i += 9;
                        if (inrow[0] & 0x80) back_i += 3; /* green */
                        if (inrow[0] & 0x40) back_i += 3;
                        if (inrow[0] & 0x80) back_i += 1; /* blue */
                        if (inrow[0] & 0x40) back_i += 1;

                        *outrow = (png_byte)back_i;
                     }

                     inrow += 4;
                  }
                  break;

               default:
                  break;
            }
         }
      }
   }

2924 2925 2926
   return 1;
}

2927 2928
static int
png_image_read_colormapped(png_voidp argument)
2929
{
2930 2931 2932 2933 2934 2935
   png_image_read_control *display = png_voidcast(png_image_read_control*,
      argument);
   png_imagep image = display->image;
   png_controlp control = image->opaque;
   png_structrp png_ptr = control->png_ptr;
   png_inforp info_ptr = control->info_ptr;
2936

2937
   int passes = 0; /* As a flag */
2938

2939
   PNG_SKIP_CHUNKS(png_ptr);
2940

2941 2942 2943 2944 2945 2946
   /* Update the 'info' structure and make sure the result is as required; first
    * make sure to turn on the interlace handling if it will be required
    * (because it can't be turned on *after* the call to png_read_update_info!)
    */
   if (display->colormap_processing == PNG_CMAP_NONE)
      passes = png_set_interlace_handling(png_ptr);
2947

2948
   png_read_update_info(png_ptr, info_ptr);
2949

2950 2951 2952 2953 2954 2955 2956 2957 2958 2959 2960
   /* The expected output can be deduced from the colormap_processing option. */
   switch (display->colormap_processing)
   {
      case PNG_CMAP_NONE:
         /* Output must be one channel and one byte per pixel, the output
          * encoding can be anything.
          */
         if ((info_ptr->color_type == PNG_COLOR_TYPE_PALETTE ||
            info_ptr->color_type == PNG_COLOR_TYPE_GRAY) &&
            info_ptr->bit_depth == 8)
            break;
2961

2962
         goto bad_output;
2963

2964 2965 2966 2967 2968 2969 2970 2971 2972 2973 2974
      case PNG_CMAP_TRANS:
      case PNG_CMAP_GA:
         /* Output must be two channels and the 'G' one must be sRGB, the latter
          * can be checked with an exact number because it should have been set
          * to this number above!
          */
         if (info_ptr->color_type == PNG_COLOR_TYPE_GRAY_ALPHA &&
            info_ptr->bit_depth == 8 &&
            png_ptr->screen_gamma == PNG_GAMMA_sRGB &&
            image->colormap_entries == 256)
            break;
2975

2976
         goto bad_output;
2977

2978 2979 2980 2981 2982 2983 2984
      case PNG_CMAP_RGB:
         /* Output must be 8-bit sRGB encoded RGB */
         if (info_ptr->color_type == PNG_COLOR_TYPE_RGB &&
            info_ptr->bit_depth == 8 &&
            png_ptr->screen_gamma == PNG_GAMMA_sRGB &&
            image->colormap_entries == 216)
            break;
2985

2986
         goto bad_output;
2987

2988 2989 2990 2991 2992 2993 2994
      case PNG_CMAP_RGB_ALPHA:
         /* Output must be 8-bit sRGB encoded RGBA */
         if (info_ptr->color_type == PNG_COLOR_TYPE_RGB_ALPHA &&
            info_ptr->bit_depth == 8 &&
            png_ptr->screen_gamma == PNG_GAMMA_sRGB &&
            image->colormap_entries == 244 /* 216 + 1 + 27 */)
            break;
2995

2996 2997 2998 2999 3000 3001
         /* goto bad_output; */
         /* FALL THROUGH */

      default:
      bad_output:
         png_error(png_ptr, "bad color-map processing (internal error)");
3002 3003
   }

3004 3005 3006 3007
   /* Now read the rows.  Do this here if it is possible to read directly into
    * the output buffer, otherwise allocate a local row buffer of the maximum
    * size libpng requires and call the relevant processing routine safely.
    */
3008
   {
3009
      png_voidp first_row = display->buffer;
3010
      ptrdiff_t row_bytes = display->row_stride;
3011

3012 3013 3014 3015
      /* The following expression is designed to work correctly whether it gives
       * a signed or an unsigned result.
       */
      if (row_bytes < 0)
3016 3017 3018 3019 3020
      {
         char *ptr = png_voidcast(char*, first_row);
         ptr += (image->height-1) * (-row_bytes);
         first_row = png_voidcast(png_voidp, ptr);
      }
3021

3022 3023
      display->first_row = first_row;
      display->row_bytes = row_bytes;
3024 3025
   }

3026 3027 3028
   if (passes == 0)
   {
      int result;
3029
      png_voidp row = png_malloc(png_ptr, png_get_rowbytes(png_ptr, info_ptr));
3030

3031 3032 3033 3034 3035 3036 3037 3038 3039
      display->local_row = row;
      result = png_safe_execute(image, png_image_read_and_map, display);
      display->local_row = NULL;
      png_free(png_ptr, row);

      return result;
   }

   else
3040
   {
3041 3042 3043
      png_alloc_size_t row_bytes = display->row_bytes;

      while (--passes >= 0)
3044
      {
3045
         png_uint_32      y = image->height;
3046
         png_bytep        row = png_voidcast(png_bytep, display->first_row);
3047

3048 3049 3050 3051 3052
         while (y-- > 0)
         {
            png_read_row(png_ptr, row, NULL);
            row += row_bytes;
         }
3053 3054
      }

3055
      return 1;
3056 3057 3058
   }
}

3059 3060 3061 3062
/* Just the row reading part of png_image_read. */
static int
png_image_read_composite(png_voidp argument)
{
3063 3064
   png_image_read_control *display = png_voidcast(png_image_read_control*,
      argument);
3065
   png_imagep image = display->image;
3066
   png_structrp png_ptr = image->opaque->png_ptr;
3067
   int passes;
3068

3069
   switch (png_ptr->interlaced)
3070 3071 3072 3073 3074 3075 3076 3077 3078 3079
   {
      case PNG_INTERLACE_NONE:
         passes = 1;
         break;

      case PNG_INTERLACE_ADAM7:
         passes = PNG_INTERLACE_ADAM7_PASSES;
         break;

      default:
3080
         passes = 0;
3081 3082 3083 3084
         png_error(png_ptr, "unknown interlace type");
   }

   {
3085 3086 3087
      png_uint_32  height = image->height;
      png_uint_32  width = image->width;
      ptrdiff_t    step_row = display->row_bytes;
3088 3089 3090 3091 3092 3093 3094 3095
      unsigned int channels = (image->format & PNG_FORMAT_FLAG_COLOR) ? 3 : 1;
      int pass;

      for (pass = 0; pass < passes; ++pass)
      {
         unsigned int     startx, stepx, stepy;
         png_uint_32      y;

3096
         if (png_ptr->interlaced == PNG_INTERLACE_ADAM7)
3097 3098 3099 3100 3101
         {
            /* The row may be empty for a short image: */
            if (PNG_PASS_COLS(width, pass) == 0)
               continue;

3102 3103
            startx = PNG_PASS_START_COL(pass) * channels;
            stepx = PNG_PASS_COL_OFFSET(pass) * channels;
3104
            y = PNG_PASS_START_ROW(pass);
3105
            stepy = PNG_PASS_ROW_OFFSET(pass);
3106 3107 3108 3109 3110 3111
         }

         else
         {
            y = 0;
            startx = 0;
3112 3113
            stepx = channels;
            stepy = 1;
3114
         }
3115

3116
         for (; y<height; y += stepy)
3117
         {
3118 3119 3120
            png_bytep inrow = png_voidcast(png_bytep, display->local_row);
            png_bytep outrow;
            png_const_bytep end_row;
3121

3122 3123
            /* Read the row, which is packed: */
            png_read_row(png_ptr, inrow, NULL);
3124

3125 3126 3127 3128
            outrow = png_voidcast(png_bytep, display->first_row);
            outrow += y * step_row;
            end_row = outrow + width * channels;

3129 3130 3131 3132 3133 3134 3135
            /* Now do the composition on each pixel in this row. */
            outrow += startx;
            for (; outrow < end_row; outrow += stepx)
            {
               png_byte alpha = inrow[channels];

               if (alpha > 0) /* else no change to the output */
3136
               {
3137
                  unsigned int c;
3138

3139
                  for (c=0; c<channels; ++c)
3140
                  {
3141
                     png_uint_32 component = inrow[c];
3142

3143
                     if (alpha < 255) /* else just use component */
3144
                     {
3145 3146 3147 3148 3149 3150 3151 3152 3153 3154 3155 3156 3157 3158
                        /* This is PNG_OPTIMIZED_ALPHA, the component value
                         * is a linear 8-bit value.  Combine this with the
                         * current outrow[c] value which is sRGB encoded.
                         * Arithmetic here is 16-bits to preserve the output
                         * values correctly.
                         */
                        component *= 257*255; /* =65535 */
                        component += (255-alpha)*png_sRGB_table[outrow[c]];

                        /* So 'component' is scaled by 255*65535 and is
                         * therefore appropriate for the sRGB to linear
                         * conversion table.
                         */
                        component = PNG_sRGB_FROM_LINEAR(component);
3159 3160
                     }

3161 3162
                     outrow[c] = (png_byte)component;
                  }
3163 3164
               }

3165
               inrow += channels+1; /* components and alpha channel */
3166
            }
3167
         }
3168 3169 3170 3171 3172 3173
      }
   }

   return 1;
}

3174 3175 3176 3177 3178 3179 3180 3181 3182 3183 3184 3185 3186 3187 3188 3189
/* The do_local_background case; called when all the following transforms are to
 * be done:
 *
 * PNG_RGB_TO_GRAY
 * PNG_COMPOSITE
 * PNG_GAMMA
 *
 * This is a work-round for the fact that both the PNG_RGB_TO_GRAY and
 * PNG_COMPOSITE code performs gamma correction, so we get double gamma
 * correction.  The fix-up is to prevent the PNG_COMPOSITE operation happening
 * inside libpng, so this routine sees an 8 or 16-bit gray+alpha row and handles
 * the removal or pre-multiplication of the alpha channel.
 */
static int
png_image_read_background(png_voidp argument)
{
3190 3191
   png_image_read_control *display = png_voidcast(png_image_read_control*,
      argument);
3192
   png_imagep image = display->image;
3193 3194
   png_structrp png_ptr = image->opaque->png_ptr;
   png_inforp info_ptr = image->opaque->info_ptr;
3195 3196
   png_uint_32 height = image->height;
   png_uint_32 width = image->width;
3197
   int pass, passes;
3198 3199 3200 3201 3202 3203 3204 3205 3206 3207 3208 3209 3210 3211 3212

   /* Double check the convoluted logic below.  We expect to get here with
    * libpng doing rgb to gray and gamma correction but background processing
    * left to the png_image_read_background function.  The rows libpng produce
    * might be 8 or 16-bit but should always have two channels; gray plus alpha.
    */
   if ((png_ptr->transformations & PNG_RGB_TO_GRAY) == 0)
      png_error(png_ptr, "lost rgb to gray");

   if ((png_ptr->transformations & PNG_COMPOSE) != 0)
      png_error(png_ptr, "unexpected compose");

   if (png_get_channels(png_ptr, info_ptr) != 2)
      png_error(png_ptr, "lost/gained channels");

3213 3214 3215 3216 3217
   /* Expect the 8-bit case to always remove the alpha channel */
   if ((image->format & PNG_FORMAT_FLAG_LINEAR) == 0 &&
      (image->format & PNG_FORMAT_FLAG_ALPHA) != 0)
      png_error(png_ptr, "unexpected 8-bit transformation");

3218
   switch (png_ptr->interlaced)
3219 3220 3221 3222 3223 3224 3225 3226 3227 3228
   {
      case PNG_INTERLACE_NONE:
         passes = 1;
         break;

      case PNG_INTERLACE_ADAM7:
         passes = PNG_INTERLACE_ADAM7_PASSES;
         break;

      default:
3229
         passes = 0;
3230 3231 3232 3233 3234 3235 3236 3237 3238 3239 3240 3241
         png_error(png_ptr, "unknown interlace type");
   }

   switch (png_get_bit_depth(png_ptr, info_ptr))
   {
      default:
         png_error(png_ptr, "unexpected bit depth");
         break;

      case 8:
         /* 8-bit sRGB gray values with an alpha channel; the alpha channel is
          * to be removed by composing on a backgroundi: either the row if
3242
          * display->background is NULL or display->background->green if not.
3243 3244 3245
          * Unlike the code above ALPHA_OPTIMIZED has *not* been done.
          */
         {
3246
            png_bytep first_row = png_voidcast(png_bytep, display->first_row);
3247
            ptrdiff_t step_row = display->row_bytes;
3248

3249
            for (pass = 0; pass < passes; ++pass)
3250
            {
3251 3252
               png_bytep        row = png_voidcast(png_bytep,
                                                   display->first_row);
3253 3254
               unsigned int     startx, stepx, stepy;
               png_uint_32      y;
3255

3256 3257 3258 3259 3260 3261 3262 3263 3264 3265 3266 3267 3268 3269 3270 3271 3272 3273
               if (png_ptr->interlaced == PNG_INTERLACE_ADAM7)
               {
                  /* The row may be empty for a short image: */
                  if (PNG_PASS_COLS(width, pass) == 0)
                     continue;

                  startx = PNG_PASS_START_COL(pass);
                  stepx = PNG_PASS_COL_OFFSET(pass);
                  y = PNG_PASS_START_ROW(pass);
                  stepy = PNG_PASS_ROW_OFFSET(pass);
               }

               else
               {
                  y = 0;
                  startx = 0;
                  stepx = stepy = 1;
               }
3274

3275 3276 3277
               if (display->background == NULL)
               {
                  for (; y<height; y += stepy)
3278
                  {
3279 3280
                     png_bytep inrow = png_voidcast(png_bytep,
                        display->local_row);
3281 3282
                     png_bytep outrow = first_row + y * step_row;
                     png_const_bytep end_row = outrow + width;
3283 3284 3285 3286 3287

                     /* Read the row, which is packed: */
                     png_read_row(png_ptr, inrow, NULL);

                     /* Now do the composition on each pixel in this row. */
3288
                     outrow += startx;
3289 3290 3291 3292 3293 3294 3295 3296 3297 3298 3299 3300 3301 3302 3303 3304 3305 3306 3307 3308 3309 3310 3311 3312 3313 3314
                     for (; outrow < end_row; outrow += stepx)
                     {
                        png_byte alpha = inrow[1];

                        if (alpha > 0) /* else no change to the output */
                        {
                           png_uint_32 component = inrow[0];

                           if (alpha < 255) /* else just use component */
                           {
                              /* Since PNG_OPTIMIZED_ALPHA was not set it is
                               * necessary to invert the sRGB transfer
                               * function and multiply the alpha out.
                               */
                              component = png_sRGB_table[component] * alpha;
                              component += png_sRGB_table[outrow[0]] *
                                 (255-alpha);
                              component = PNG_sRGB_FROM_LINEAR(component);
                           }

                           outrow[0] = (png_byte)component;
                        }

                        inrow += 2; /* gray and alpha channel */
                     }
                  }
3315
               }
3316

3317 3318 3319 3320
               else /* constant background value */
               {
                  png_byte background8 = display->background->green;
                  png_uint_16 background = png_sRGB_table[background8];
3321

3322
                  for (; y<height; y += stepy)
3323
                  {
3324 3325
                     png_bytep inrow = png_voidcast(png_bytep,
                        display->local_row);
3326 3327
                     png_bytep outrow = first_row + y * step_row;
                     png_const_bytep end_row = outrow + width;
3328 3329 3330 3331 3332

                     /* Read the row, which is packed: */
                     png_read_row(png_ptr, inrow, NULL);

                     /* Now do the composition on each pixel in this row. */
3333
                     outrow += startx;
3334 3335 3336 3337 3338 3339 3340 3341 3342 3343 3344 3345 3346 3347 3348 3349 3350 3351 3352 3353 3354 3355 3356 3357 3358 3359
                     for (; outrow < end_row; outrow += stepx)
                     {
                        png_byte alpha = inrow[1];

                        if (alpha > 0) /* else use background */
                        {
                           png_uint_32 component = inrow[0];

                           if (alpha < 255) /* else just use component */
                           {
                              component = png_sRGB_table[component] * alpha;
                              component += background * (255-alpha);
                              component = PNG_sRGB_FROM_LINEAR(component);
                           }

                           outrow[0] = (png_byte)component;
                        }

                        else
                           outrow[0] = background8;

                        inrow += 2; /* gray and alpha channel */
                     }

                     row += display->row_bytes;
                  }
3360
               }
3361 3362 3363 3364 3365 3366 3367 3368 3369 3370
            }
         }
         break;

      case 16:
         /* 16-bit linear with pre-multiplied alpha; the pre-multiplication must
          * still be done and, maybe, the alpha channel removed.  This code also
          * handles the alpha-first option.
          */
         {
3371 3372 3373 3374 3375 3376
            png_uint_16p first_row = png_voidcast(png_uint_16p,
               display->first_row);
            /* The division by two is safe because the caller passed in a
             * stride which was multiplied by 2 (below) to get row_bytes.
             */
            ptrdiff_t    step_row = display->row_bytes / 2;
3377
            int preserve_alpha = (image->format & PNG_FORMAT_FLAG_ALPHA) != 0;
3378
            unsigned int outchannels = 1+preserve_alpha;
3379 3380 3381 3382 3383 3384 3385
            int swap_alpha = 0;

            if (preserve_alpha && (image->format & PNG_FORMAT_FLAG_AFIRST))
               swap_alpha = 1;

            for (pass = 0; pass < passes; ++pass)
            {
3386
               unsigned int     startx, stepx, stepy;
3387 3388
               png_uint_32      y;

3389 3390
               /* The 'x' start and step are adjusted to output components here.
                */
3391
               if (png_ptr->interlaced == PNG_INTERLACE_ADAM7)
3392 3393 3394 3395 3396
               {
                  /* The row may be empty for a short image: */
                  if (PNG_PASS_COLS(width, pass) == 0)
                     continue;

3397 3398
                  startx = PNG_PASS_START_COL(pass) * outchannels;
                  stepx = PNG_PASS_COL_OFFSET(pass) * outchannels;
3399 3400 3401 3402 3403 3404 3405 3406
                  y = PNG_PASS_START_ROW(pass);
                  stepy = PNG_PASS_ROW_OFFSET(pass);
               }

               else
               {
                  y = 0;
                  startx = 0;
3407 3408
                  stepx = outchannels;
                  stepy = 1;
3409 3410 3411
               }

               for (; y<height; y += stepy)
3412 3413
               {
                  png_const_uint_16p inrow;
3414
                  png_uint_16p outrow = first_row + y*step_row;
3415 3416 3417
                  png_uint_16p end_row = outrow + width * outchannels;

                  /* Read the row, which is packed: */
3418 3419 3420
                  png_read_row(png_ptr, png_voidcast(png_bytep,
                     display->local_row), NULL);
                  inrow = png_voidcast(png_const_uint_16p, display->local_row);
3421 3422 3423 3424 3425

                  /* Now do the pre-multiplication on each pixel in this row.
                   */
                  outrow += startx;
                  for (; outrow < end_row; outrow += stepx)
3426
                  {
3427 3428
                     png_uint_32 component = inrow[0];
                     png_uint_16 alpha = inrow[1];
3429

3430
                     if (alpha > 0) /* else 0 */
3431
                     {
3432
                        if (alpha < 65535) /* else just use component */
3433
                        {
3434 3435 3436
                           component *= alpha;
                           component += 32767;
                           component /= 65535;
3437
                        }
3438
                     }
3439

3440 3441
                     else
                        component = 0;
3442

3443
                     outrow[swap_alpha] = (png_uint_16)component;
3444
                     if (preserve_alpha)
3445
                        outrow[1 ^ swap_alpha] = alpha;
3446

3447
                     inrow += 2; /* components and alpha channel */
3448
                  }
3449
               }
3450 3451 3452 3453 3454 3455 3456 3457
            }
         }
         break;
   }

   return 1;
}

3458 3459
/* The guts of png_image_finish_read as a png_safe_execute callback. */
static int
3460
png_image_read_direct(png_voidp argument)
3461
{
3462 3463
   png_image_read_control *display = png_voidcast(png_image_read_control*,
      argument);
3464
   png_imagep image = display->image;
3465 3466
   png_structrp png_ptr = image->opaque->png_ptr;
   png_inforp info_ptr = image->opaque->info_ptr;
3467 3468 3469 3470

   png_uint_32 format = image->format;
   int linear = (format & PNG_FORMAT_FLAG_LINEAR) != 0;
   int do_local_compose = 0;
3471
   int do_local_background = 0; /* to avoid double gamma correction bug */
3472 3473 3474 3475 3476 3477 3478
   int passes = 0;

   /* Add transforms to ensure the correct output format is produced then check
    * that the required implementation support is there.  Always expand; always
    * need 8 bits minimum, no palette and expanded tRNS.
    */
   png_set_expand(png_ptr);
3479

3480 3481
   /* Now check the format to see if it was modified. */
   {
3482 3483
      png_uint_32 base_format = png_image_format(png_ptr) &
         ~PNG_FORMAT_FLAG_COLORMAP /* removed by png_set_expand */;
3484
      png_uint_32 change = format ^ base_format;
3485 3486
      png_fixed_point output_gamma;
      int mode; /* alpha mode */
3487

3488 3489 3490 3491 3492 3493 3494 3495 3496 3497 3498 3499 3500 3501 3502 3503 3504 3505 3506 3507 3508 3509 3510 3511 3512 3513 3514 3515 3516 3517 3518 3519
      /* Do this first so that we have a record if rgb to gray is happening. */
      if (change & PNG_FORMAT_FLAG_COLOR)
      {
         /* gray<->color transformation required. */
         if (format & PNG_FORMAT_FLAG_COLOR)
            png_set_gray_to_rgb(png_ptr);

         else
         {
            /* libpng can't do both rgb to gray and
             * background/pre-multiplication if there is also significant gamma
             * correction, because both operations require linear colors and
             * the code only supports one transform doing the gamma correction.
             * Handle this by doing the pre-multiplication or background
             * operation in this code, if necessary.
             *
             * TODO: fix this by rewriting pngrtran.c (!)
             *
             * For the moment (given that fixing this in pngrtran.c is an
             * enormous change) 'do_local_background' is used to indicate that
             * the problem exists.
             */
            if (base_format & PNG_FORMAT_FLAG_ALPHA)
               do_local_background = 1/*maybe*/;

            png_set_rgb_to_gray_fixed(png_ptr, PNG_ERROR_ACTION_NONE,
               PNG_RGB_TO_GRAY_DEFAULT, PNG_RGB_TO_GRAY_DEFAULT);
         }

         change &= ~PNG_FORMAT_FLAG_COLOR;
      }

3520 3521 3522
      /* Set the gamma appropriately, linear for 16-bit input, sRGB otherwise.
       */
      {
3523
         png_fixed_point input_gamma_default;
3524 3525 3526 3527 3528 3529

         if (base_format & PNG_FORMAT_FLAG_LINEAR)
            input_gamma_default = PNG_GAMMA_LINEAR;
         else
            input_gamma_default = PNG_DEFAULT_sRGB;

3530 3531 3532 3533 3534 3535 3536 3537 3538 3539 3540 3541
         /* Call png_set_alpha_mode to set the default for the input gamma; the
          * output gamma is set by a second call below.
          */
         png_set_alpha_mode_fixed(png_ptr, PNG_ALPHA_PNG, input_gamma_default);
      }

      if (linear)
      {
         /* If there *is* an alpha channel in the input it must be multiplied
          * out; use PNG_ALPHA_STANDARD, otherwise just use PNG_ALPHA_PNG.
          */
         if (base_format & PNG_FORMAT_FLAG_ALPHA)
3542
            mode = PNG_ALPHA_STANDARD; /* associated alpha */
3543 3544 3545 3546

         else
            mode = PNG_ALPHA_PNG;

3547 3548 3549 3550 3551 3552 3553 3554 3555 3556 3557 3558 3559 3560 3561 3562 3563 3564 3565 3566 3567 3568 3569
         output_gamma = PNG_GAMMA_LINEAR;
      }

      else
      {
         mode = PNG_ALPHA_PNG;
         output_gamma = PNG_DEFAULT_sRGB;
      }

      /* If 'do_local_background' is set check for the presence of gamma
       * correction; this is part of the work-round for the libpng bug
       * described above.
       *
       * TODO: fix libpng and remove this.
       */
      if (do_local_background)
      {
         png_fixed_point gtest;

         /* This is 'png_gamma_threshold' from pngrtran.c; the test used for
          * gamma correction, the screen gamma hasn't been set on png_struct
          * yet; it's set below.  png_struct::gamma, however, is set to the
          * final value.
3570
          */
3571 3572
         if (png_muldiv(&gtest, output_gamma, png_ptr->colorspace.gamma,
               PNG_FP_1) && !png_gamma_significant(gtest))
3573 3574 3575 3576 3577 3578 3579 3580 3581
            do_local_background = 0;

         else if (mode == PNG_ALPHA_STANDARD)
         {
            do_local_background = 2/*required*/;
            mode = PNG_ALPHA_PNG; /* prevent libpng doing it */
         }

         /* else leave as 1 for the checks below */
3582
      }
3583

3584 3585 3586 3587 3588
      /* If the bit-depth changes then handle that here. */
      if (change & PNG_FORMAT_FLAG_LINEAR)
      {
         if (linear /*16-bit output*/)
            png_set_expand_16(png_ptr);
3589

3590 3591
         else /* 8-bit output */
            png_set_scale_16(png_ptr);
3592

3593
         change &= ~PNG_FORMAT_FLAG_LINEAR;
3594 3595 3596 3597 3598 3599 3600 3601 3602 3603 3604
      }

      /* Now the background/alpha channel changes. */
      if (change & PNG_FORMAT_FLAG_ALPHA)
      {
         /* Removing an alpha channel requires composition for the 8-bit
          * formats; for the 16-bit it is already done, above, by the
          * pre-multiplication and the channel just needs to be stripped.
          */
         if (base_format & PNG_FORMAT_FLAG_ALPHA)
         {
3605 3606 3607 3608 3609 3610 3611 3612
            /* If RGB->gray is happening the alpha channel must be left and the
             * operation completed locally.
             *
             * TODO: fix libpng and remove this.
             */
            if (do_local_background)
               do_local_background = 2/*required*/;

3613
            /* 16-bit output: just remove the channel */
3614
            else if (linear) /* compose on black (well, pre-multiply) */
3615 3616
               png_set_strip_alpha(png_ptr);

3617
            /* 8-bit output: do an appropriate compose */
3618 3619 3620 3621 3622 3623 3624 3625 3626 3627 3628 3629 3630 3631 3632 3633 3634 3635 3636 3637 3638 3639 3640 3641
            else if (display->background != NULL)
            {
               png_color_16 c;

               c.index = 0; /*unused*/
               c.red = display->background->red;
               c.green = display->background->green;
               c.blue = display->background->blue;
               c.gray = display->background->green;

               /* This is always an 8-bit sRGB value, using the 'green' channel
                * for gray is much better than calculating the luminance here;
                * we can get off-by-one errors in that calculation relative to
                * the app expectations and that will show up in transparent
                * pixels.
                */
               png_set_background_fixed(png_ptr, &c,
                  PNG_BACKGROUND_GAMMA_SCREEN, 0/*need_expand*/,
                  0/*gamma: not used*/);
            }

            else /* compose on row: implemented below. */
            {
               do_local_compose = 1;
3642
               /* This leaves the alpha channel in the output, so it has to be
3643 3644 3645 3646
                * removed by the code below.  Set the encoding to the 'OPTIMIZE'
                * one so the code only has to hack on the pixels that require
                * composition.
                */
3647
               mode = PNG_ALPHA_OPTIMIZED;
3648 3649 3650 3651 3652 3653
            }
         }

         else /* output needs an alpha channel */
         {
            /* This is tricky because it happens before the swap operation has
3654
             * been accomplished; however, the swap does *not* swap the added
3655 3656
             * alpha channel (weird API), so it must be added in the correct
             * place.
3657
             */
3658
            png_uint_32 filler; /* opaque filler */
3659
            int where;
3660 3661 3662 3663 3664 3665 3666

            if (linear)
               filler = 65535;

            else
               filler = 255;

3667 3668 3669 3670 3671 3672 3673 3674 3675 3676 3677 3678
#           ifdef PNG_FORMAT_AFIRST_SUPPORTED
               if (format & PNG_FORMAT_FLAG_AFIRST)
               {
                  where = PNG_FILLER_BEFORE;
                  change &= ~PNG_FORMAT_FLAG_AFIRST;
               }

               else
#           endif
               where = PNG_FILLER_AFTER;

            png_set_add_alpha(png_ptr, filler, where);
3679 3680
         }

3681
         /* This stops the (irrelevant) call to swap_alpha below. */
3682 3683 3684
         change &= ~PNG_FORMAT_FLAG_ALPHA;
      }

3685 3686 3687 3688 3689 3690
      /* Now set the alpha mode correctly; this is always done, even if there is
       * no alpha channel in either the input or the output because it correctly
       * sets the output gamma.
       */
      png_set_alpha_mode_fixed(png_ptr, mode, output_gamma);

3691
#     ifdef PNG_FORMAT_BGR_SUPPORTED
3692
         if (change & PNG_FORMAT_FLAG_BGR)
3693
         {
3694
            /* Check only the output format; PNG is never BGR; don't do this if
3695 3696 3697 3698 3699 3700 3701 3702 3703 3704 3705 3706 3707
             * the output is gray, but fix up the 'format' value in that case.
             */
            if (format & PNG_FORMAT_FLAG_COLOR)
               png_set_bgr(png_ptr);

            else
               format &= ~PNG_FORMAT_FLAG_BGR;

            change &= ~PNG_FORMAT_FLAG_BGR;
         }
#     endif

#     ifdef PNG_FORMAT_AFIRST_SUPPORTED
3708
         if (change & PNG_FORMAT_FLAG_AFIRST)
3709 3710 3711 3712 3713 3714 3715
         {
            /* Only relevant if there is an alpha channel - it's particularly
             * important to handle this correctly because do_local_compose may
             * be set above and then libpng will keep the alpha channel for this
             * code to remove.
             */
            if (format & PNG_FORMAT_FLAG_ALPHA)
3716 3717 3718 3719 3720 3721 3722
            {
               /* Disable this if doing a local background,
                * TODO: remove this when local background is no longer required.
                */
               if (do_local_background != 2)
                  png_set_swap_alpha(png_ptr);
            }
3723 3724 3725 3726 3727 3728 3729 3730 3731 3732 3733 3734 3735 3736 3737 3738 3739 3740 3741 3742 3743 3744 3745 3746

            else
               format &= ~PNG_FORMAT_FLAG_AFIRST;

            change &= ~PNG_FORMAT_FLAG_AFIRST;
         }
#     endif

      /* If the *output* is 16-bit then we need to check for a byte-swap on this
       * architecture.
       */
      if (linear)
      {
         PNG_CONST png_uint_16 le = 0x0001;

         if (*(png_const_bytep)&le)
            png_set_swap(png_ptr);
      }

      /* If change is not now 0 some transformation is missing - error out. */
      if (change)
         png_error(png_ptr, "png_read_image: unsupported transformation");
   }

3747
   PNG_SKIP_CHUNKS(png_ptr);
3748

3749
   /* Update the 'info' structure and make sure the result is as required; first
3750 3751
    * make sure to turn on the interlace handling if it will be required
    * (because it can't be turned on *after* the call to png_read_update_info!)
3752 3753
    *
    * TODO: remove the do_local_background fixup below.
3754
    */
3755
   if (!do_local_compose && do_local_background != 2)
3756 3757 3758 3759 3760 3761 3762 3763 3764 3765 3766 3767
      passes = png_set_interlace_handling(png_ptr);

   png_read_update_info(png_ptr, info_ptr);

   {
      png_uint_32 info_format = 0;

      if (info_ptr->color_type & PNG_COLOR_MASK_COLOR)
         info_format |= PNG_FORMAT_FLAG_COLOR;

      if (info_ptr->color_type & PNG_COLOR_MASK_ALPHA)
      {
3768
         /* do_local_compose removes this channel below. */
3769
         if (!do_local_compose)
3770 3771 3772 3773 3774 3775
         {
            /* do_local_background does the same if required. */
            if (do_local_background != 2 ||
               (format & PNG_FORMAT_FLAG_ALPHA) != 0)
               info_format |= PNG_FORMAT_FLAG_ALPHA;
         }
3776 3777 3778 3779 3780 3781 3782 3783 3784 3785 3786 3787 3788 3789
      }

      else if (do_local_compose) /* internal error */
         png_error(png_ptr, "png_image_read: alpha channel lost");

      if (info_ptr->bit_depth == 16)
         info_format |= PNG_FORMAT_FLAG_LINEAR;

#     ifdef PNG_FORMAT_BGR_SUPPORTED
         if (png_ptr->transformations & PNG_BGR)
            info_format |= PNG_FORMAT_FLAG_BGR;
#     endif

#     ifdef PNG_FORMAT_AFIRST_SUPPORTED
3790 3791 3792 3793 3794 3795 3796
         if (do_local_background == 2)
         {
            if (format & PNG_FORMAT_FLAG_AFIRST)
               info_format |= PNG_FORMAT_FLAG_AFIRST;
         }

         if ((png_ptr->transformations & PNG_SWAP_ALPHA) != 0 ||
3797 3798
            ((png_ptr->transformations & PNG_ADD_ALPHA) != 0 &&
            (png_ptr->flags & PNG_FLAG_FILLER_AFTER) == 0))
3799 3800 3801 3802
         {
            if (do_local_background == 2)
               png_error(png_ptr, "unexpected alpha swap transformation");

3803
            info_format |= PNG_FORMAT_FLAG_AFIRST;
3804
         }
3805 3806 3807 3808 3809 3810 3811 3812 3813 3814 3815 3816 3817
#     endif

      /* This is actually an internal error. */
      if (info_format != format)
         png_error(png_ptr, "png_read_image: invalid transformations");
   }

   /* Now read the rows.  If do_local_compose is set then it is necessary to use
    * a local row buffer.  The output will be GA, RGBA or BGRA and must be
    * converted to G, RGB or BGR as appropriate.  The 'local_row' member of the
    * display acts as a flag.
    */
   {
3818
      png_voidp first_row = display->buffer;
3819 3820 3821
      ptrdiff_t row_bytes = display->row_stride;

      if (linear)
3822
         row_bytes *= 2;
3823 3824 3825 3826 3827

      /* The following expression is designed to work correctly whether it gives
       * a signed or an unsigned result.
       */
      if (row_bytes < 0)
3828 3829 3830 3831 3832
      {
         char *ptr = png_voidcast(char*, first_row);
         ptr += (image->height-1) * (-row_bytes);
         first_row = png_voidcast(png_voidp, ptr);
      }
3833 3834 3835 3836 3837 3838 3839 3840

      display->first_row = first_row;
      display->row_bytes = row_bytes;
   }

   if (do_local_compose)
   {
      int result;
3841
      png_voidp row = png_malloc(png_ptr, png_get_rowbytes(png_ptr, info_ptr));
3842 3843 3844 3845 3846 3847 3848 3849 3850

      display->local_row = row;
      result = png_safe_execute(image, png_image_read_composite, display);
      display->local_row = NULL;
      png_free(png_ptr, row);

      return result;
   }

3851 3852 3853
   else if (do_local_background == 2)
   {
      int result;
3854
      png_voidp row = png_malloc(png_ptr, png_get_rowbytes(png_ptr, info_ptr));
3855 3856 3857 3858 3859 3860 3861 3862 3863

      display->local_row = row;
      result = png_safe_execute(image, png_image_read_background, display);
      display->local_row = NULL;
      png_free(png_ptr, row);

      return result;
   }

3864 3865 3866 3867 3868 3869 3870
   else
   {
      png_alloc_size_t row_bytes = display->row_bytes;

      while (--passes >= 0)
      {
         png_uint_32      y = image->height;
3871
         png_bytep        row = png_voidcast(png_bytep, display->first_row);
3872

3873 3874 3875 3876 3877 3878 3879 3880 3881 3882 3883 3884
         while (y-- > 0)
         {
            png_read_row(png_ptr, row, NULL);
            row += row_bytes;
         }
      }

      return 1;
   }
}

int PNGAPI
3885 3886
png_image_finish_read(png_imagep image, png_const_colorp background,
   void *buffer, png_int_32 row_stride, void *colormap)
3887
{
3888
   if (image != NULL && image->version == PNG_IMAGE_VERSION)
3889 3890 3891
   {
      png_uint_32 check;

3892 3893 3894
      if (row_stride == 0)
         row_stride = PNG_IMAGE_ROW_STRIDE(*image);

3895 3896 3897 3898 3899 3900
      if (row_stride < 0)
         check = -row_stride;

      else
         check = row_stride;

3901 3902
      if (image->opaque != NULL && buffer != NULL &&
         check >= PNG_IMAGE_ROW_STRIDE(*image))
3903
      {
3904 3905 3906 3907 3908 3909
         if ((image->format & PNG_FORMAT_FLAG_COLORMAP) == 0 ||
            (image->colormap_entries > 0 && colormap != NULL))
         {
            int result;
            png_image_read_control display;

3910
            png_memset(&display, 0, (sizeof display));
3911 3912 3913 3914 3915 3916 3917 3918 3919 3920 3921 3922 3923 3924 3925 3926 3927 3928 3929 3930 3931 3932 3933 3934 3935 3936
            display.image = image;
            display.buffer = buffer;
            display.row_stride = row_stride;
            display.colormap = colormap;
            display.background = background;
            display.local_row = NULL;

            /* Choose the correct 'end' routine; for the color-map case all the
             * setup has already been done.
             */
            if (image->format & PNG_FORMAT_FLAG_COLORMAP)
               result =
                  png_safe_execute(image, png_image_read_colormap, &display) &&
                  png_safe_execute(image, png_image_read_colormapped, &display);

            else
               result =
                  png_safe_execute(image, png_image_read_direct, &display);

            png_image_free(image);
            return result;
         }

         else
            return png_image_error(image,
               "png_image_finish_read[color-map]: no color-map");
3937 3938 3939 3940 3941 3942 3943 3944 3945 3946 3947
      }

      else
         return png_image_error(image,
            "png_image_finish_read: invalid argument");
   }

   return 0;
}

#endif /* PNG_SIMPLIFIED_READ_SUPPORTED */
3948
#endif /* PNG_READ_SUPPORTED */