png.c 26.1 KB
Newer Older
G
Guy Schalnat 已提交
1

2 3
/* png.c - location for general purpose libpng functions
 *
4
 * Last changed in libpng 1.4.0 [December 29, 2009]
5
 * Copyright (c) 1998-2009 Glenn Randers-Pehrson
6 7
 * (Version 0.96 Copyright (c) 1996, 1997 Andreas Dilger)
 * (Version 0.88 Copyright (c) 1995, 1996 Guy Eric Schalnat, Group 42, Inc.)
8
 *
9
 * This code is released under the libpng license.
10
 * For conditions of distribution and use, see the disclaimer
11
 * and license in png.h
12
 */
G
Guy Schalnat 已提交
13 14

#define PNG_NO_EXTERN
15
#define PNG_NO_PEDANTIC_WARNINGS
G
Guy Schalnat 已提交
16
#include "png.h"
17
#include "pngpriv.h"
G
Guy Schalnat 已提交
18

19
/* Generate a compiler error if there is an old png.h in the search path. */
20
typedef version_1_4_0rc06 Your_png_h_is_not_version_1_4_0rc06;
21

A
Andreas Dilger 已提交
22
/* Version information for C files.  This had better match the version
23 24
 * string defined in png.h.
 */
25

A
Andreas Dilger 已提交
26 27 28 29 30
/* Tells libpng that we have already handled the first "num_bytes" bytes
 * of the PNG file signature.  If the PNG data is embedded into another
 * stream we can set num_bytes = 8 so that libpng will not attempt to read
 * or write any of the magic bytes before it starts on the IHDR.
 */
31

32
#ifdef PNG_READ_SUPPORTED
33
void PNGAPI
A
Andreas Dilger 已提交
34 35
png_set_sig_bytes(png_structp png_ptr, int num_bytes)
{
36 37
   png_debug(1, "in png_set_sig_bytes");

38 39
   if (png_ptr == NULL)
      return;
40

A
Andreas Dilger 已提交
41
   if (num_bytes > 8)
42
      png_error(png_ptr, "Too many bytes for PNG signature");
A
Andreas Dilger 已提交
43

44
   png_ptr->sig_bytes = (png_byte)(num_bytes < 0 ? 0 : num_bytes);
A
Andreas Dilger 已提交
45 46 47 48 49 50 51 52 53 54
}

/* Checks whether the supplied bytes match the PNG signature.  We allow
 * checking less than the full 8-byte signature so that those apps that
 * already read the first few bytes of a file to determine the file type
 * can simply check the remaining bytes for extra assurance.  Returns
 * an integer less than, equal to, or greater than zero if sig is found,
 * respectively, to be less than, to match, or be greater than the correct
 * PNG signature (this is the same behaviour as strcmp, memcmp, etc).
 */
55
int PNGAPI
A
Andreas Dilger 已提交
56
png_sig_cmp(png_bytep sig, png_size_t start, png_size_t num_to_check)
G
Guy Schalnat 已提交
57
{
58
   png_byte png_signature[8] = {137, 80, 78, 71, 13, 10, 26, 10};
A
Andreas Dilger 已提交
59 60 61
   if (num_to_check > 8)
      num_to_check = 8;
   else if (num_to_check < 1)
62
      return (-1);
A
Andreas Dilger 已提交
63

A
Andreas Dilger 已提交
64
   if (start > 7)
65
      return (-1);
G
Guy Schalnat 已提交
66

A
Andreas Dilger 已提交
67 68 69
   if (start + num_to_check > 8)
      num_to_check = 8 - start;

70
   return ((int)(png_memcmp(&sig[start], &png_signature[start], num_to_check)));
A
Andreas Dilger 已提交
71 72
}

73
#endif /* PNG_READ_SUPPORTED */
G
Guy Schalnat 已提交
74

75
#if defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED)
76
/* Function to allocate memory for zlib and clear it to 0. */
77
voidpf /* PRIVATE */
G
Guy Schalnat 已提交
78
png_zalloc(voidpf png_ptr, uInt items, uInt size)
G
Guy Schalnat 已提交
79
{
80 81 82
   png_voidp ptr;
   png_structp p=(png_structp)png_ptr;
   png_uint_32 save_flags=p->flags;
83
   png_alloc_size_t num_bytes;
84

85 86
   if (png_ptr == NULL)
      return (NULL);
87 88
   if (items > PNG_UINT_32_MAX/size)
   {
89 90
     png_warning (p, "Potential overflow in png_zalloc()");
     return (NULL);
91
   }
92
   num_bytes = (png_alloc_size_t)items * size;
G
Guy Schalnat 已提交
93

94 95 96
   p->flags|=PNG_FLAG_MALLOC_NULL_MEM_OK;
   ptr = (png_voidp)png_malloc((png_structp)png_ptr, num_bytes);
   p->flags=save_flags;
G
Guy Schalnat 已提交
97

98 99 100
   return ((voidpf)ptr);
}

101
/* Function to free memory for zlib */
102
void /* PRIVATE */
G
Guy Schalnat 已提交
103
png_zfree(voidpf png_ptr, voidpf ptr)
G
Guy Schalnat 已提交
104
{
A
Andreas Dilger 已提交
105
   png_free((png_structp)png_ptr, (png_voidp)ptr);
G
Guy Schalnat 已提交
106 107
}

A
Andreas Dilger 已提交
108
/* Reset the CRC variable to 32 bits of 1's.  Care must be taken
109 110
 * in case CRC is > 32 bits to leave the top bits 0.
 */
111
void /* PRIVATE */
G
Guy Schalnat 已提交
112
png_reset_crc(png_structp png_ptr)
G
Guy Schalnat 已提交
113
{
A
Andreas Dilger 已提交
114
   png_ptr->crc = crc32(0, Z_NULL, 0);
G
Guy Schalnat 已提交
115 116
}

A
Andreas Dilger 已提交
117
/* Calculate the CRC over a section of data.  We can only pass as
118 119 120 121
 * much data to this routine as the largest single buffer size.  We
 * also check that this data will actually be used before going to the
 * trouble of calculating it.
 */
122
void /* PRIVATE */
A
Andreas Dilger 已提交
123
png_calculate_crc(png_structp png_ptr, png_bytep ptr, png_size_t length)
G
Guy Schalnat 已提交
124
{
A
Andreas Dilger 已提交
125 126 127 128 129 130 131 132 133 134 135 136 137 138 139
   int need_crc = 1;

   if (png_ptr->chunk_name[0] & 0x20)                     /* ancillary */
   {
      if ((png_ptr->flags & PNG_FLAG_CRC_ANCILLARY_MASK) ==
          (PNG_FLAG_CRC_ANCILLARY_USE | PNG_FLAG_CRC_ANCILLARY_NOWARN))
         need_crc = 0;
   }
   else                                                    /* critical */
   {
      if (png_ptr->flags & PNG_FLAG_CRC_CRITICAL_IGNORE)
         need_crc = 0;
   }

   if (need_crc)
140
      png_ptr->crc = crc32(png_ptr->crc, ptr, (uInt)length);
G
Guy Schalnat 已提交
141
}
G
Guy Schalnat 已提交
142

A
Andreas Dilger 已提交
143
/* Allocate the memory for an info_struct for the application.  We don't
144
 * really need the png_ptr, but it could potentially be useful in the
145
 * future.  This should be used in favour of malloc(png_sizeof(png_info))
146 147 148
 * and png_info_init() so that applications that want to use a shared
 * libpng don't have to be recompiled if png_info changes size.
 */
149
png_infop PNGAPI
G
Guy Schalnat 已提交
150 151 152 153
png_create_info_struct(png_structp png_ptr)
{
   png_infop info_ptr;

154
   png_debug(1, "in png_create_info_struct");
155

156 157
   if (png_ptr == NULL)
      return (NULL);
158

159
#ifdef PNG_USER_MEM_SUPPORTED
160 161
   info_ptr = (png_infop)png_create_struct_2(PNG_STRUCT_INFO,
      png_ptr->malloc_fn, png_ptr->mem_ptr);
162
#else
163
   info_ptr = (png_infop)png_create_struct(PNG_STRUCT_INFO);
164
#endif
165
   if (info_ptr != NULL)
166
      png_info_init_3(&info_ptr, png_sizeof(png_info));
G
Guy Schalnat 已提交
167

168
   return (info_ptr);
G
Guy Schalnat 已提交
169 170
}

A
Andreas Dilger 已提交
171
/* This function frees the memory associated with a single info struct.
172 173 174 175
 * Normally, one would use either png_destroy_read_struct() or
 * png_destroy_write_struct() to free an info struct, but this may be
 * useful for some applications.
 */
176
void PNGAPI
A
Andreas Dilger 已提交
177 178 179 180
png_destroy_info_struct(png_structp png_ptr, png_infopp info_ptr_ptr)
{
   png_infop info_ptr = NULL;

181
   png_debug(1, "in png_destroy_info_struct");
182

183 184 185
   if (png_ptr == NULL)
      return;

A
Andreas Dilger 已提交
186
   if (info_ptr_ptr != NULL)
A
Andreas Dilger 已提交
187 188
      info_ptr = *info_ptr_ptr;

A
Andreas Dilger 已提交
189
   if (info_ptr != NULL)
A
Andreas Dilger 已提交
190 191 192
   {
      png_info_destroy(png_ptr, info_ptr);

193
#ifdef PNG_USER_MEM_SUPPORTED
194 195
      png_destroy_struct_2((png_voidp)info_ptr, png_ptr->free_fn,
          png_ptr->mem_ptr);
196
#else
A
Andreas Dilger 已提交
197
      png_destroy_struct((png_voidp)info_ptr);
198
#endif
199
      *info_ptr_ptr = NULL;
A
Andreas Dilger 已提交
200 201 202 203
   }
}

/* Initialize the info structure.  This is now an internal function (0.89)
204 205 206
 * and applications using it are urged to use png_create_info_struct()
 * instead.
 */
207

208 209 210 211 212
void PNGAPI
png_info_init_3(png_infopp ptr_ptr, png_size_t png_info_struct_size)
{
   png_infop info_ptr = *ptr_ptr;

213 214
   png_debug(1, "in png_info_init_3");

215 216
   if (info_ptr == NULL)
      return;
217

218
   if (png_sizeof(png_info) > png_info_struct_size)
219 220 221 222 223
   {
      png_destroy_struct(info_ptr);
      info_ptr = (png_infop)png_create_struct(PNG_STRUCT_INFO);
      *ptr_ptr = info_ptr;
   }
224

225
   /* Set everything to 0 */
226
   png_memset(info_ptr, 0, png_sizeof(png_info));
A
Andreas Dilger 已提交
227 228
}

229
void PNGAPI
230 231 232
png_data_freer(png_structp png_ptr, png_infop info_ptr,
   int freer, png_uint_32 mask)
{
233
   png_debug(1, "in png_data_freer");
234

235 236
   if (png_ptr == NULL || info_ptr == NULL)
      return;
237

238
   if (freer == PNG_DESTROY_WILL_FREE_DATA)
239
      info_ptr->free_me |= mask;
240
   else if (freer == PNG_USER_WILL_FREE_DATA)
241 242 243
      info_ptr->free_me &= ~mask;
   else
      png_warning(png_ptr,
244
         "Unknown freer parameter in png_data_freer");
245 246
}

247
void PNGAPI
248 249
png_free_data(png_structp png_ptr, png_infop info_ptr, png_uint_32 mask,
   int num)
250
{
251
   png_debug(1, "in png_free_data");
252

253 254
   if (png_ptr == NULL || info_ptr == NULL)
      return;
255

256
#ifdef PNG_TEXT_SUPPORTED
257
   /* Free text item num or (if num == -1) all text items */
258
   if ((mask & PNG_FREE_TEXT) & info_ptr->free_me)
259
   {
260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276
      if (num != -1)
      {
         if (info_ptr->text && info_ptr->text[num].key)
         {
            png_free(png_ptr, info_ptr->text[num].key);
            info_ptr->text[num].key = NULL;
         }
      }
      else
      {
         int i;
         for (i = 0; i < info_ptr->num_text; i++)
             png_free_data(png_ptr, info_ptr, PNG_FREE_TEXT, i);
         png_free(png_ptr, info_ptr->text);
         info_ptr->text = NULL;
         info_ptr->num_text=0;
      }
277 278 279
   }
#endif

280
#ifdef PNG_tRNS_SUPPORTED
281
   /* Free any tRNS entry */
282 283
   if ((mask & PNG_FREE_TRNS) & info_ptr->free_me)
   {
284 285
      png_free(png_ptr, info_ptr->trans_alpha);
      info_ptr->trans_alpha = NULL;
286 287
      info_ptr->valid &= ~PNG_INFO_tRNS;
   }
288 289
#endif

290
#ifdef PNG_sCAL_SUPPORTED
291
   /* Free any sCAL entry */
292 293
   if ((mask & PNG_FREE_SCAL) & info_ptr->free_me)
   {
294
#if defined(PNG_FIXED_POINT_SUPPORTED) && !defined(PNG_FLOATING_POINT_SUPPORTED)
295 296 297 298
      png_free(png_ptr, info_ptr->scal_s_width);
      png_free(png_ptr, info_ptr->scal_s_height);
      info_ptr->scal_s_width = NULL;
      info_ptr->scal_s_height = NULL;
299
#endif
300 301
      info_ptr->valid &= ~PNG_INFO_sCAL;
   }
302 303
#endif

304
#ifdef PNG_pCAL_SUPPORTED
305
   /* Free any pCAL entry */
306 307 308 309 310 311 312 313 314 315 316 317
   if ((mask & PNG_FREE_PCAL) & info_ptr->free_me)
   {
      png_free(png_ptr, info_ptr->pcal_purpose);
      png_free(png_ptr, info_ptr->pcal_units);
      info_ptr->pcal_purpose = NULL;
      info_ptr->pcal_units = NULL;
      if (info_ptr->pcal_params != NULL)
         {
            int i;
            for (i = 0; i < (int)info_ptr->pcal_nparams; i++)
            {
               png_free(png_ptr, info_ptr->pcal_params[i]);
318
               info_ptr->pcal_params[i] = NULL;
319 320 321 322 323 324
            }
            png_free(png_ptr, info_ptr->pcal_params);
            info_ptr->pcal_params = NULL;
         }
      info_ptr->valid &= ~PNG_INFO_pCAL;
   }
325 326
#endif

327
#ifdef PNG_iCCP_SUPPORTED
328
   /* Free any iCCP entry */
329 330 331 332 333 334 335 336
   if ((mask & PNG_FREE_ICCP) & info_ptr->free_me)
   {
      png_free(png_ptr, info_ptr->iccp_name);
      png_free(png_ptr, info_ptr->iccp_profile);
      info_ptr->iccp_name = NULL;
      info_ptr->iccp_profile = NULL;
      info_ptr->valid &= ~PNG_INFO_iCCP;
   }
337 338
#endif

339
#ifdef PNG_sPLT_SUPPORTED
340
   /* Free a given sPLT entry, or (if num == -1) all sPLT entries */
341
   if ((mask & PNG_FREE_SPLT) & info_ptr->free_me)
342
   {
343
      if (num != -1)
344
      {
345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365
         if (info_ptr->splt_palettes)
         {
            png_free(png_ptr, info_ptr->splt_palettes[num].name);
            png_free(png_ptr, info_ptr->splt_palettes[num].entries);
            info_ptr->splt_palettes[num].name = NULL;
            info_ptr->splt_palettes[num].entries = NULL;
         }
      }
      else
      {
         if (info_ptr->splt_palettes_num)
         {
            int i;
            for (i = 0; i < (int)info_ptr->splt_palettes_num; i++)
               png_free_data(png_ptr, info_ptr, PNG_FREE_SPLT, i);

            png_free(png_ptr, info_ptr->splt_palettes);
            info_ptr->splt_palettes = NULL;
            info_ptr->splt_palettes_num = 0;
         }
         info_ptr->valid &= ~PNG_INFO_sPLT;
366
      }
367 368 369
   }
#endif

370
#ifdef PNG_UNKNOWN_CHUNKS_SUPPORTED
371 372 373 374 375
   if (png_ptr->unknown_chunk.data)
   {
      png_free(png_ptr, png_ptr->unknown_chunk.data);
      png_ptr->unknown_chunk.data = NULL;
   }
376

377
   if ((mask & PNG_FREE_UNKN) & info_ptr->free_me)
378
   {
379 380 381 382 383 384 385 386 387 388 389
      if (num != -1)
      {
          if (info_ptr->unknown_chunks)
          {
             png_free(png_ptr, info_ptr->unknown_chunks[num].data);
             info_ptr->unknown_chunks[num].data = NULL;
          }
      }
      else
      {
         int i;
390

391 392 393 394
         if (info_ptr->unknown_chunks_num)
         {
            for (i = 0; i < (int)info_ptr->unknown_chunks_num; i++)
               png_free_data(png_ptr, info_ptr, PNG_FREE_UNKN, i);
395

396 397 398 399 400
            png_free(png_ptr, info_ptr->unknown_chunks);
            info_ptr->unknown_chunks = NULL;
            info_ptr->unknown_chunks_num = 0;
         }
      }
401 402 403
   }
#endif

404
#ifdef PNG_hIST_SUPPORTED
405
   /* Free any hIST entry */
406 407 408 409 410 411
   if ((mask & PNG_FREE_HIST)  & info_ptr->free_me)
   {
      png_free(png_ptr, info_ptr->hist);
      info_ptr->hist = NULL;
      info_ptr->valid &= ~PNG_INFO_hIST;
   }
412 413
#endif

414
   /* Free any PLTE entry that was internally allocated */
415 416 417 418 419 420 421
   if ((mask & PNG_FREE_PLTE) & info_ptr->free_me)
   {
      png_zfree(png_ptr, info_ptr->palette);
      info_ptr->palette = NULL;
      info_ptr->valid &= ~PNG_INFO_PLTE;
      info_ptr->num_palette = 0;
   }
422

423
#ifdef PNG_INFO_IMAGE_SUPPORTED
424
   /* Free any image bits attached to the info structure */
425 426 427 428 429 430 431 432
   if ((mask & PNG_FREE_ROWS) & info_ptr->free_me)
   {
      if (info_ptr->row_pointers)
      {
         int row;
         for (row = 0; row < (int)info_ptr->height; row++)
         {
            png_free(png_ptr, info_ptr->row_pointers[row]);
433
            info_ptr->row_pointers[row] = NULL;
434 435
         }
         png_free(png_ptr, info_ptr->row_pointers);
436
         info_ptr->row_pointers = NULL;
437 438 439
      }
      info_ptr->valid &= ~PNG_INFO_IDAT;
   }
440
#endif
441

442
   if (num == -1)
443
      info_ptr->free_me &= ~mask;
444
   else
445
      info_ptr->free_me &= ~(mask & ~PNG_FREE_MUL);
446
}
447

A
Andreas Dilger 已提交
448
/* This is an internal routine to free any memory that the info struct is
A
Andreas Dilger 已提交
449 450 451
 * pointing to before re-using it or freeing the struct itself.  Recall
 * that png_free() checks for NULL pointers for us.
 */
452
void /* PRIVATE */
A
Andreas Dilger 已提交
453 454
png_info_destroy(png_structp png_ptr, png_infop info_ptr)
{
455
   png_debug(1, "in png_info_destroy");
456 457

   png_free_data(png_ptr, info_ptr, PNG_FREE_ALL, -1);
458

459
#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
460 461
   if (png_ptr->num_chunk_list)
   {
462
      png_free(png_ptr, png_ptr->chunk_list);
463
      png_ptr->chunk_list = NULL;
464
      png_ptr->num_chunk_list = 0;
465
   }
A
Andreas Dilger 已提交
466
#endif
467

468
   png_info_init_3(&info_ptr, png_sizeof(png_info));
G
Guy Schalnat 已提交
469
}
470
#endif /* defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED) */
G
Guy Schalnat 已提交
471

G
Guy Schalnat 已提交
472
/* This function returns a pointer to the io_ptr associated with the user
473 474 475
 * functions.  The application should free any memory associated with this
 * pointer before png_write_destroy() or png_read_destroy() are called.
 */
476
png_voidp PNGAPI
G
Guy Schalnat 已提交
477 478
png_get_io_ptr(png_structp png_ptr)
{
479 480
   if (png_ptr == NULL)
      return (NULL);
481
   return (png_ptr->io_ptr);
G
Guy Schalnat 已提交
482
}
A
Andreas Dilger 已提交
483

484
#if defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED)
485
#ifdef PNG_STDIO_SUPPORTED
A
Andreas Dilger 已提交
486
/* Initialize the default input/output functions for the PNG file.  If you
487
 * use your own read or write routines, you can call either png_set_read_fn()
488 489 490
 * or png_set_write_fn() instead of png_init_io().  If you have defined
 * PNG_NO_STDIO, you must use a function of your own because "FILE *" isn't
 * necessarily available.
491
 */
492
void PNGAPI
493
png_init_io(png_structp png_ptr, png_FILE_p fp)
G
Guy Schalnat 已提交
494
{
495
   png_debug(1, "in png_init_io");
496

497 498
   if (png_ptr == NULL)
      return;
499

G
Guy Schalnat 已提交
500 501
   png_ptr->io_ptr = (png_voidp)fp;
}
A
Andreas Dilger 已提交
502
#endif
503

504
#ifdef PNG_TIME_RFC1123_SUPPORTED
505 506 507
/* Convert the supplied time into an RFC 1123 string suitable for use in
 * a "Creation Time" or other text-based time string.
 */
508
png_charp PNGAPI
509 510 511
png_convert_to_rfc1123(png_structp png_ptr, png_timep ptime)
{
   static PNG_CONST char short_months[12][4] =
512 513
        {"Jan", "Feb", "Mar", "Apr", "May", "Jun",
         "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"};
514

515 516
   if (png_ptr == NULL)
      return (NULL);
517
   if (png_ptr->time_buffer == NULL)
518 519 520 521
   {
      png_ptr->time_buffer = (png_charp)png_malloc(png_ptr, (png_uint_32)(29*
         png_sizeof(char)));
   }
522 523

#ifdef USE_FAR_KEYWORD
524 525
   {
      char near_time_buf[29];
526
      png_snprintf6(near_time_buf, 29, "%d %s %d %02d:%02d:%02d +0000",
527 528 529 530
          ptime->day % 32, short_months[(ptime->month - 1) % 12],
          ptime->year, ptime->hour % 24, ptime->minute % 60,
          ptime->second % 61);
      png_memcpy(png_ptr->time_buffer, near_time_buf,
531
          29*png_sizeof(char));
532
   }
533
#else
534
   png_snprintf6(png_ptr->time_buffer, 29, "%d %s %d %02d:%02d:%02d +0000",
535 536 537
       ptime->day % 32, short_months[(ptime->month - 1) % 12],
       ptime->year, ptime->hour % 24, ptime->minute % 60,
       ptime->second % 61);
538 539 540 541
#endif
   return ((png_charp)png_ptr->time_buffer);
}
#endif /* PNG_TIME_RFC1123_SUPPORTED */
542

543
#endif /* defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED) */
544

545
png_charp PNGAPI
546 547
png_get_copyright(png_structp png_ptr)
{
548
   png_ptr = png_ptr;  /* Silence compiler warning about unused png_ptr */
549 550 551 552
#ifdef PNG_STRING_COPYRIGHT
      return PNG_STRING_COPYRIGHT
#else
#ifdef __STDC__
553
   return ((png_charp) PNG_STRING_NEWLINE \
554 555
     "libpng version 1.4.0rc06 - December 29, 2009" PNG_STRING_NEWLINE \
     "Copyright (c) 1998-2010 Glenn Randers-Pehrson" PNG_STRING_NEWLINE \
556 557 558
     "Copyright (c) 1996-1997 Andreas Dilger" PNG_STRING_NEWLINE \
     "Copyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc." \
     PNG_STRING_NEWLINE);
559
#else
560 561
      return ((png_charp) "libpng version 1.4.0rc06 - December 29, 2009\
      Copyright (c) 1998-2010 Glenn Randers-Pehrson\
562 563 564 565
      Copyright (c) 1996-1997 Andreas Dilger\
      Copyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.");
#endif
#endif
566
}
567

568
/* The following return the library version as a short string in the
569 570 571 572 573 574
 * format 1.0.0 through 99.99.99zz.  To get the version of *.h files
 * used with your application, print out PNG_LIBPNG_VER_STRING, which
 * is defined in png.h.
 * Note: now there is no difference between png_get_libpng_ver() and
 * png_get_header_ver().  Due to the version_nn_nn_nn typedef guard,
 * it is guaranteed that png.c uses the correct version of png.h.
575
 */
576
png_charp PNGAPI
577 578 579
png_get_libpng_ver(png_structp png_ptr)
{
   /* Version of *.c files used when building libpng */
580
   png_ptr = png_ptr;  /* Silence compiler warning about unused png_ptr */
581
   return ((png_charp) PNG_LIBPNG_VER_STRING);
582 583
}

584
png_charp PNGAPI
585 586 587
png_get_header_ver(png_structp png_ptr)
{
   /* Version of *.h files used when building libpng */
588
   png_ptr = png_ptr;  /* Silence compiler warning about unused png_ptr */
589
   return ((png_charp) PNG_LIBPNG_VER_STRING);
590 591
}

592
png_charp PNGAPI
593 594 595
png_get_header_version(png_structp png_ptr)
{
   /* Returns longer string containing both version and date */
596
   png_ptr = png_ptr;  /* Silence compiler warning about unused png_ptr */
597
#ifdef __STDC__
598 599 600 601
   return ((png_charp) PNG_HEADER_VERSION_STRING
#ifndef PNG_READ_SUPPORTED
   "     (NO READ SUPPORT)"
#endif
602
   PNG_STRING_NEWLINE);
603 604 605
#else
   return ((png_charp) PNG_HEADER_VERSION_STRING);
#endif
606 607
}

608
#if defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED)
609
#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
610
int PNGAPI
611 612
png_handle_as_unknown(png_structp png_ptr, png_bytep chunk_name)
{
613
   /* Check chunk_name and return "keep" value if it's on the list, else 0 */
614 615
   int i;
   png_bytep p;
616
   if (png_ptr == NULL || chunk_name == NULL || png_ptr->num_chunk_list<=0)
617
      return 0;
618 619
   p = png_ptr->chunk_list + png_ptr->num_chunk_list*5 - 5;
   for (i = png_ptr->num_chunk_list; i; i--, p -= 5)
620
      if (!png_memcmp(chunk_name, p, 4))
621
        return ((int)*(p + 4));
622 623 624
   return 0;
}
#endif
625 626

/* This function, added to libpng-1.0.6g, is untested. */
627
int PNGAPI
628 629
png_reset_zstream(png_structp png_ptr)
{
630 631
   if (png_ptr == NULL)
      return Z_STREAM_ERROR;
632 633
   return (inflateReset(&png_ptr->zstream));
}
634
#endif /* defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED) */
635

636
/* This function was added to libpng-1.0.7 */
637 638 639 640
png_uint_32 PNGAPI
png_access_version_number(void)
{
   /* Version of *.c files used when building libpng */
641
   return((png_uint_32) PNG_LIBPNG_VER);
642 643 644
}


645

646 647 648 649 650 651
#if defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED)
#ifdef PNG_SIZE_T
/* Added at libpng version 1.2.6 */
   PNG_EXTERN png_size_t PNGAPI png_convert_size PNGARG((size_t size));
png_size_t PNGAPI
png_convert_size(size_t size)
652
{
653 654 655
   if (size > (png_size_t)-1)
      PNG_ABORT();  /* We haven't got access to png_ptr, so no png_error() */
   return ((png_size_t)size);
656
}
657
#endif /* PNG_SIZE_T */
658

659
/* Added at libpng version 1.2.34 and 1.4.0 (moved from pngset.c) */
660 661
#ifdef PNG_cHRM_SUPPORTED
#ifdef PNG_CHECK_cHRM_SUPPORTED
662

663
/*
664 665 666 667 668 669 670 671 672 673 674 675
 *    Multiply two 32-bit numbers, V1 and V2, using 32-bit
 *    arithmetic, to produce a 64 bit result in the HI/LO words.
 *
 *                  A B
 *                x C D
 *               ------
 *              AD || BD
 *        AC || CB || 0
 *
 *    where A and B are the high and low 16-bit words of V1,
 *    C and D are the 16-bit words of V2, AD is the product of
 *    A and D, and X || Y is (X << 16) + Y.
676 677
*/

678 679
void /* PRIVATE */
png_64bit_product (long v1, long v2, unsigned long *hi_product,
680 681
   unsigned long *lo_product)
{
682 683
   int a, b, c, d;
   long lo, hi, x, y;
684

685 686 687 688
   a = (v1 >> 16) & 0xffff;
   b = v1 & 0xffff;
   c = (v2 >> 16) & 0xffff;
   d = v2 & 0xffff;
689

690 691 692
   lo = b * d;                   /* BD */
   x = a * d + c * b;            /* AD + CB */
   y = ((lo >> 16) & 0xffff) + x;
693

694 695
   lo = (lo & 0xffff) | ((y & 0xffff) << 16);
   hi = (y >> 16) & 0xffff;
696

697
   hi += a * c;                  /* AC */
698

699 700
   *hi_product = (unsigned long)hi;
   *lo_product = (unsigned long)lo;
701
}
702

703
int /* PRIVATE */
704 705 706 707 708 709
png_check_cHRM_fixed(png_structp png_ptr,
   png_fixed_point white_x, png_fixed_point white_y, png_fixed_point red_x,
   png_fixed_point red_y, png_fixed_point green_x, png_fixed_point green_y,
   png_fixed_point blue_x, png_fixed_point blue_y)
{
   int ret = 1;
710
   unsigned long xy_hi,xy_lo,yx_hi,yx_lo;
711 712

   png_debug(1, "in function png_check_cHRM_fixed");
713

714 715 716
   if (png_ptr == NULL)
      return 0;

717 718 719 720
   if (white_x < 0 || white_y <= 0 ||
         red_x < 0 ||   red_y <  0 ||
       green_x < 0 || green_y <  0 ||
        blue_x < 0 ||  blue_y <  0)
721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738
   {
      png_warning(png_ptr,
        "Ignoring attempt to set negative chromaticity value");
      ret = 0;
   }
   if (white_x > (png_fixed_point) PNG_UINT_31_MAX ||
       white_y > (png_fixed_point) PNG_UINT_31_MAX ||
         red_x > (png_fixed_point) PNG_UINT_31_MAX ||
         red_y > (png_fixed_point) PNG_UINT_31_MAX ||
       green_x > (png_fixed_point) PNG_UINT_31_MAX ||
       green_y > (png_fixed_point) PNG_UINT_31_MAX ||
        blue_x > (png_fixed_point) PNG_UINT_31_MAX ||
        blue_y > (png_fixed_point) PNG_UINT_31_MAX )
   {
      png_warning(png_ptr,
        "Ignoring attempt to set chromaticity value exceeding 21474.83");
      ret = 0;
   }
739
   if (white_x > 100000L - white_y)
740 741 742 743
   {
      png_warning(png_ptr, "Invalid cHRM white point");
      ret = 0;
   }
744
   if (red_x > 100000L - red_y)
745 746 747 748
   {
      png_warning(png_ptr, "Invalid cHRM red point");
      ret = 0;
   }
749
   if (green_x > 100000L - green_y)
750 751 752 753
   {
      png_warning(png_ptr, "Invalid cHRM green point");
      ret = 0;
   }
754
   if (blue_x > 100000L - blue_y)
755 756 757 758
   {
      png_warning(png_ptr, "Invalid cHRM blue point");
      ret = 0;
   }
759 760 761 762 763 764 765 766 767 768 769

   png_64bit_product(green_x - red_x, blue_y - red_y, &xy_hi, &xy_lo);
   png_64bit_product(green_y - red_y, blue_x - red_x, &yx_hi, &yx_lo);

   if (xy_hi == yx_hi && xy_lo == yx_lo)
   {
      png_warning(png_ptr,
         "Ignoring attempt to set cHRM RGB triangle with zero area");
      ret = 0;
   }

770 771
   return ret;
}
772
#endif /* PNG_CHECK_cHRM_SUPPORTED */
773
#endif /* PNG_cHRM_SUPPORTED */
774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797

void /* PRIVATE */
png_check_IHDR(png_structp png_ptr,
   png_uint_32 width, png_uint_32 height, int bit_depth,
   int color_type, int interlace_type, int compression_type,
   int filter_type)
{
   int error = 0;

   /* Check for width and height valid values */
   if (width == 0)
   {
      png_warning(png_ptr, "Image width is zero in IHDR");
      error = 1;
   }

   if (height == 0)
   {
      png_warning(png_ptr, "Image height is zero in IHDR");
      error = 1;
   }

#ifdef PNG_SET_USER_LIMITS_SUPPORTED
   if (width > png_ptr->user_width_max || width > PNG_USER_WIDTH_MAX)
798 799 800
#else
   if (width > PNG_USER_WIDTH_MAX)
#endif
801 802 803 804 805
   {
      png_warning(png_ptr, "Image width exceeds user limit in IHDR");
      error = 1;
   }

806
#ifdef PNG_SET_USER_LIMITS_SUPPORTED
807 808 809
   if (height > png_ptr->user_height_max || height > PNG_USER_HEIGHT_MAX)
#else
   if (height > PNG_USER_HEIGHT_MAX)
810
#endif
811 812 813 814 815
   {
      png_warning(png_ptr, "Image height exceeds user limit in IHDR");
      error = 1;
   }

816
   if (width > PNG_UINT_31_MAX)
817
   {
818
      png_warning(png_ptr, "Invalid image width in IHDR");
819 820 821 822 823
      error = 1;
   }

   if ( height > PNG_UINT_31_MAX)
   {
824
      png_warning(png_ptr, "Invalid image height in IHDR");
825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887
      error = 1;
   }

   if ( width > (PNG_UINT_32_MAX
                 >> 3)      /* 8-byte RGBA pixels */
                 - 64       /* bigrowbuf hack */
                 - 1        /* filter byte */
                 - 7*8      /* rounding of width to multiple of 8 pixels */
                 - 8)       /* extra max_pixel_depth pad */
      png_warning(png_ptr, "Width is too large for libpng to process pixels");

   /* Check other values */
   if (bit_depth != 1 && bit_depth != 2 && bit_depth != 4 &&
       bit_depth != 8 && bit_depth != 16)
   {
      png_warning(png_ptr, "Invalid bit depth in IHDR");
      error = 1;
   }

   if (color_type < 0 || color_type == 1 ||
       color_type == 5 || color_type > 6)
   {
      png_warning(png_ptr, "Invalid color type in IHDR");
      error = 1;
   }

   if (((color_type == PNG_COLOR_TYPE_PALETTE) && bit_depth > 8) ||
       ((color_type == PNG_COLOR_TYPE_RGB ||
         color_type == PNG_COLOR_TYPE_GRAY_ALPHA ||
         color_type == PNG_COLOR_TYPE_RGB_ALPHA) && bit_depth < 8))
   {
      png_warning(png_ptr, "Invalid color type/bit depth combination in IHDR");
      error = 1;
   }

   if (interlace_type >= PNG_INTERLACE_LAST)
   {
      png_warning(png_ptr, "Unknown interlace method in IHDR");
      error = 1;
   }

   if (compression_type != PNG_COMPRESSION_TYPE_BASE)
   {
      png_warning(png_ptr, "Unknown compression method in IHDR");
      error = 1;
   }

#ifdef PNG_MNG_FEATURES_SUPPORTED
   /* Accept filter_method 64 (intrapixel differencing) only if
    * 1. Libpng was compiled with PNG_MNG_FEATURES_SUPPORTED and
    * 2. Libpng did not read a PNG signature (this filter_method is only
    *    used in PNG datastreams that are embedded in MNG datastreams) and
    * 3. The application called png_permit_mng_features with a mask that
    *    included PNG_FLAG_MNG_FILTER_64 and
    * 4. The filter_method is 64 and
    * 5. The color_type is RGB or RGBA
    */
   if ((png_ptr->mode & PNG_HAVE_PNG_SIGNATURE) &&
       png_ptr->mng_features_permitted)
      png_warning(png_ptr, "MNG features are not allowed in a PNG datastream");

   if (filter_type != PNG_FILTER_TYPE_BASE)
   {
888
      if (!((png_ptr->mng_features_permitted & PNG_FLAG_MNG_FILTER_64) &&
889
         (filter_type == PNG_INTRAPIXEL_DIFFERENCING) &&
890
         ((png_ptr->mode & PNG_HAVE_PNG_SIGNATURE) == 0) &&
891 892
         (color_type == PNG_COLOR_TYPE_RGB ||
         color_type == PNG_COLOR_TYPE_RGB_ALPHA)))
893 894 895 896
      {
         png_warning(png_ptr, "Unknown filter method in IHDR");
         error = 1;
      }
897

898 899 900 901 902 903
      if (png_ptr->mode & PNG_HAVE_PNG_SIGNATURE)
      {
         png_warning(png_ptr, "Invalid filter method in IHDR");
         error = 1;
      }
   }
904 905 906 907 908 909 910 911 912 913 914 915

#else
   if (filter_type != PNG_FILTER_TYPE_BASE)
   {
      png_warning(png_ptr, "Unknown filter method in IHDR");
      error = 1;
   }
#endif

   if (error == 1)
      png_error(png_ptr, "Invalid IHDR data");
}
916
#endif /* defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED) */