png.c 26.3 KB
Newer Older
G
Guy Schalnat 已提交
1

2 3
/* png.c - location for general purpose libpng functions
 *
4
 * Last changed in libpng 1.4.0 [September 30, 2009]
5
 * Copyright (c) 1998-2009 Glenn Randers-Pehrson
6 7
 * (Version 0.96 Copyright (c) 1996, 1997 Andreas Dilger)
 * (Version 0.88 Copyright (c) 1995, 1996 Guy Eric Schalnat, Group 42, Inc.)
8
 *
9
 * This code is released under the libpng license.
10
 * For conditions of distribution and use, see the disclaimer
11
 * and license in png.h
12
 */
G
Guy Schalnat 已提交
13 14 15

#define PNG_NO_EXTERN
#include "png.h"
16
#include "pngpriv.h"
G
Guy Schalnat 已提交
17

18
/* Generate a compiler error if there is an old png.h in the search path. */
19
typedef version_1_4_0beta84 Your_png_h_is_not_version_1_4_0beta84;
20

A
Andreas Dilger 已提交
21
/* Version information for C files.  This had better match the version
22
 * string defined in png.h.  */
23

A
Andreas Dilger 已提交
24 25 26 27 28
/* Tells libpng that we have already handled the first "num_bytes" bytes
 * of the PNG file signature.  If the PNG data is embedded into another
 * stream we can set num_bytes = 8 so that libpng will not attempt to read
 * or write any of the magic bytes before it starts on the IHDR.
 */
29

30
#ifdef PNG_READ_SUPPORTED
31
void PNGAPI
A
Andreas Dilger 已提交
32 33
png_set_sig_bytes(png_structp png_ptr, int num_bytes)
{
34 35
   png_debug(1, "in png_set_sig_bytes");

36 37
   if (png_ptr == NULL)
      return;
38

A
Andreas Dilger 已提交
39
   if (num_bytes > 8)
40
      png_error(png_ptr, "Too many bytes for PNG signature");
A
Andreas Dilger 已提交
41

42
   png_ptr->sig_bytes = (png_byte)(num_bytes < 0 ? 0 : num_bytes);
A
Andreas Dilger 已提交
43 44 45 46 47 48 49 50 51 52
}

/* Checks whether the supplied bytes match the PNG signature.  We allow
 * checking less than the full 8-byte signature so that those apps that
 * already read the first few bytes of a file to determine the file type
 * can simply check the remaining bytes for extra assurance.  Returns
 * an integer less than, equal to, or greater than zero if sig is found,
 * respectively, to be less than, to match, or be greater than the correct
 * PNG signature (this is the same behaviour as strcmp, memcmp, etc).
 */
53
int PNGAPI
A
Andreas Dilger 已提交
54
png_sig_cmp(png_bytep sig, png_size_t start, png_size_t num_to_check)
G
Guy Schalnat 已提交
55
{
56
   png_byte png_signature[8] = {137, 80, 78, 71, 13, 10, 26, 10};
A
Andreas Dilger 已提交
57 58 59
   if (num_to_check > 8)
      num_to_check = 8;
   else if (num_to_check < 1)
60
      return (-1);
A
Andreas Dilger 已提交
61

A
Andreas Dilger 已提交
62
   if (start > 7)
63
      return (-1);
G
Guy Schalnat 已提交
64

A
Andreas Dilger 已提交
65 66 67
   if (start + num_to_check > 8)
      num_to_check = 8 - start;

68
   return ((int)(png_memcmp(&sig[start], &png_signature[start], num_to_check)));
A
Andreas Dilger 已提交
69 70
}

71
#endif /* PNG_READ_SUPPORTED */
G
Guy Schalnat 已提交
72

73
#if defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED)
74
/* Function to allocate memory for zlib and clear it to 0. */
75
voidpf /* PRIVATE */
G
Guy Schalnat 已提交
76
png_zalloc(voidpf png_ptr, uInt items, uInt size)
G
Guy Schalnat 已提交
77
{
78 79 80
   png_voidp ptr;
   png_structp p=(png_structp)png_ptr;
   png_uint_32 save_flags=p->flags;
81
   png_alloc_size_t num_bytes;
82

83 84
   if (png_ptr == NULL)
      return (NULL);
85 86
   if (items > PNG_UINT_32_MAX/size)
   {
87 88
     png_warning (p, "Potential overflow in png_zalloc()");
     return (NULL);
89
   }
90
   num_bytes = (png_alloc_size_t)items * size;
G
Guy Schalnat 已提交
91

92 93 94
   p->flags|=PNG_FLAG_MALLOC_NULL_MEM_OK;
   ptr = (png_voidp)png_malloc((png_structp)png_ptr, num_bytes);
   p->flags=save_flags;
G
Guy Schalnat 已提交
95

96 97 98
   return ((voidpf)ptr);
}

99
/* Function to free memory for zlib */
100
void /* PRIVATE */
G
Guy Schalnat 已提交
101
png_zfree(voidpf png_ptr, voidpf ptr)
G
Guy Schalnat 已提交
102
{
A
Andreas Dilger 已提交
103
   png_free((png_structp)png_ptr, (png_voidp)ptr);
G
Guy Schalnat 已提交
104 105
}

A
Andreas Dilger 已提交
106
/* Reset the CRC variable to 32 bits of 1's.  Care must be taken
107 108
 * in case CRC is > 32 bits to leave the top bits 0.
 */
109
void /* PRIVATE */
G
Guy Schalnat 已提交
110
png_reset_crc(png_structp png_ptr)
G
Guy Schalnat 已提交
111
{
A
Andreas Dilger 已提交
112
   png_ptr->crc = crc32(0, Z_NULL, 0);
G
Guy Schalnat 已提交
113 114
}

A
Andreas Dilger 已提交
115
/* Calculate the CRC over a section of data.  We can only pass as
116 117 118 119
 * much data to this routine as the largest single buffer size.  We
 * also check that this data will actually be used before going to the
 * trouble of calculating it.
 */
120
void /* PRIVATE */
A
Andreas Dilger 已提交
121
png_calculate_crc(png_structp png_ptr, png_bytep ptr, png_size_t length)
G
Guy Schalnat 已提交
122
{
A
Andreas Dilger 已提交
123 124 125 126 127 128 129 130 131 132 133 134 135 136 137
   int need_crc = 1;

   if (png_ptr->chunk_name[0] & 0x20)                     /* ancillary */
   {
      if ((png_ptr->flags & PNG_FLAG_CRC_ANCILLARY_MASK) ==
          (PNG_FLAG_CRC_ANCILLARY_USE | PNG_FLAG_CRC_ANCILLARY_NOWARN))
         need_crc = 0;
   }
   else                                                    /* critical */
   {
      if (png_ptr->flags & PNG_FLAG_CRC_CRITICAL_IGNORE)
         need_crc = 0;
   }

   if (need_crc)
138
      png_ptr->crc = crc32(png_ptr->crc, ptr, (uInt)length);
G
Guy Schalnat 已提交
139
}
G
Guy Schalnat 已提交
140

A
Andreas Dilger 已提交
141
/* Allocate the memory for an info_struct for the application.  We don't
142
 * really need the png_ptr, but it could potentially be useful in the
143
 * future.  This should be used in favour of malloc(png_sizeof(png_info))
144 145 146
 * and png_info_init() so that applications that want to use a shared
 * libpng don't have to be recompiled if png_info changes size.
 */
147
png_infop PNGAPI
G
Guy Schalnat 已提交
148 149 150 151
png_create_info_struct(png_structp png_ptr)
{
   png_infop info_ptr;

152
   png_debug(1, "in png_create_info_struct");
153

154 155
   if (png_ptr == NULL)
      return (NULL);
156

157
#ifdef PNG_USER_MEM_SUPPORTED
158 159
   info_ptr = (png_infop)png_create_struct_2(PNG_STRUCT_INFO,
      png_ptr->malloc_fn, png_ptr->mem_ptr);
160
#else
161
   info_ptr = (png_infop)png_create_struct(PNG_STRUCT_INFO);
162
#endif
163
   if (info_ptr != NULL)
164
      png_info_init_3(&info_ptr, png_sizeof(png_info));
G
Guy Schalnat 已提交
165

166
   return (info_ptr);
G
Guy Schalnat 已提交
167 168
}

A
Andreas Dilger 已提交
169
/* This function frees the memory associated with a single info struct.
170 171 172 173
 * Normally, one would use either png_destroy_read_struct() or
 * png_destroy_write_struct() to free an info struct, but this may be
 * useful for some applications.
 */
174
void PNGAPI
A
Andreas Dilger 已提交
175 176 177 178
png_destroy_info_struct(png_structp png_ptr, png_infopp info_ptr_ptr)
{
   png_infop info_ptr = NULL;

179
   png_debug(1, "in png_destroy_info_struct");
180

181 182 183
   if (png_ptr == NULL)
      return;

A
Andreas Dilger 已提交
184
   if (info_ptr_ptr != NULL)
A
Andreas Dilger 已提交
185 186
      info_ptr = *info_ptr_ptr;

A
Andreas Dilger 已提交
187
   if (info_ptr != NULL)
A
Andreas Dilger 已提交
188 189 190
   {
      png_info_destroy(png_ptr, info_ptr);

191
#ifdef PNG_USER_MEM_SUPPORTED
192 193
      png_destroy_struct_2((png_voidp)info_ptr, png_ptr->free_fn,
          png_ptr->mem_ptr);
194
#else
A
Andreas Dilger 已提交
195
      png_destroy_struct((png_voidp)info_ptr);
196
#endif
197
      *info_ptr_ptr = NULL;
A
Andreas Dilger 已提交
198 199 200 201
   }
}

/* Initialize the info structure.  This is now an internal function (0.89)
202 203 204
 * and applications using it are urged to use png_create_info_struct()
 * instead.
 */
205

206 207 208 209 210
void PNGAPI
png_info_init_3(png_infopp ptr_ptr, png_size_t png_info_struct_size)
{
   png_infop info_ptr = *ptr_ptr;

211 212
   png_debug(1, "in png_info_init_3");

213 214
   if (info_ptr == NULL)
      return;
215

216
   if (png_sizeof(png_info) > png_info_struct_size)
217 218 219 220 221
   {
      png_destroy_struct(info_ptr);
      info_ptr = (png_infop)png_create_struct(PNG_STRUCT_INFO);
      *ptr_ptr = info_ptr;
   }
222

223
   /* Set everything to 0 */
224
   png_memset(info_ptr, 0, png_sizeof(png_info));
A
Andreas Dilger 已提交
225 226
}

227
void PNGAPI
228 229 230
png_data_freer(png_structp png_ptr, png_infop info_ptr,
   int freer, png_uint_32 mask)
{
231
   png_debug(1, "in png_data_freer");
232

233 234
   if (png_ptr == NULL || info_ptr == NULL)
      return;
235

236
   if (freer == PNG_DESTROY_WILL_FREE_DATA)
237
      info_ptr->free_me |= mask;
238
   else if (freer == PNG_USER_WILL_FREE_DATA)
239 240 241
      info_ptr->free_me &= ~mask;
   else
      png_warning(png_ptr,
242
         "Unknown freer parameter in png_data_freer");
243 244
}

245
void PNGAPI
246 247
png_free_data(png_structp png_ptr, png_infop info_ptr, png_uint_32 mask,
   int num)
248
{
249
   png_debug(1, "in png_free_data");
250

251 252
   if (png_ptr == NULL || info_ptr == NULL)
      return;
253

254
#ifdef PNG_TEXT_SUPPORTED
255
   /* Free text item num or (if num == -1) all text items */
256
   if ((mask & PNG_FREE_TEXT) & info_ptr->free_me)
257
   {
258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274
      if (num != -1)
      {
         if (info_ptr->text && info_ptr->text[num].key)
         {
            png_free(png_ptr, info_ptr->text[num].key);
            info_ptr->text[num].key = NULL;
         }
      }
      else
      {
         int i;
         for (i = 0; i < info_ptr->num_text; i++)
             png_free_data(png_ptr, info_ptr, PNG_FREE_TEXT, i);
         png_free(png_ptr, info_ptr->text);
         info_ptr->text = NULL;
         info_ptr->num_text=0;
      }
275 276 277
   }
#endif

278
#ifdef PNG_tRNS_SUPPORTED
279
   /* Free any tRNS entry */
280 281
   if ((mask & PNG_FREE_TRNS) & info_ptr->free_me)
   {
282 283
      png_free(png_ptr, info_ptr->trans_alpha);
      info_ptr->trans_alpha = NULL;
284 285
      info_ptr->valid &= ~PNG_INFO_tRNS;
   }
286 287
#endif

288
#ifdef PNG_sCAL_SUPPORTED
289
   /* Free any sCAL entry */
290 291
   if ((mask & PNG_FREE_SCAL) & info_ptr->free_me)
   {
292
#if defined(PNG_FIXED_POINT_SUPPORTED) && !defined(PNG_FLOATING_POINT_SUPPORTED)
293 294 295 296
      png_free(png_ptr, info_ptr->scal_s_width);
      png_free(png_ptr, info_ptr->scal_s_height);
      info_ptr->scal_s_width = NULL;
      info_ptr->scal_s_height = NULL;
297
#endif
298 299
      info_ptr->valid &= ~PNG_INFO_sCAL;
   }
300 301
#endif

302
#ifdef PNG_pCAL_SUPPORTED
303
   /* Free any pCAL entry */
304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322
   if ((mask & PNG_FREE_PCAL) & info_ptr->free_me)
   {
      png_free(png_ptr, info_ptr->pcal_purpose);
      png_free(png_ptr, info_ptr->pcal_units);
      info_ptr->pcal_purpose = NULL;
      info_ptr->pcal_units = NULL;
      if (info_ptr->pcal_params != NULL)
         {
            int i;
            for (i = 0; i < (int)info_ptr->pcal_nparams; i++)
            {
               png_free(png_ptr, info_ptr->pcal_params[i]);
               info_ptr->pcal_params[i]=NULL;
            }
            png_free(png_ptr, info_ptr->pcal_params);
            info_ptr->pcal_params = NULL;
         }
      info_ptr->valid &= ~PNG_INFO_pCAL;
   }
323 324
#endif

325
#ifdef PNG_iCCP_SUPPORTED
326
   /* Free any iCCP entry */
327 328 329 330 331 332 333 334
   if ((mask & PNG_FREE_ICCP) & info_ptr->free_me)
   {
      png_free(png_ptr, info_ptr->iccp_name);
      png_free(png_ptr, info_ptr->iccp_profile);
      info_ptr->iccp_name = NULL;
      info_ptr->iccp_profile = NULL;
      info_ptr->valid &= ~PNG_INFO_iCCP;
   }
335 336
#endif

337
#ifdef PNG_sPLT_SUPPORTED
338
   /* Free a given sPLT entry, or (if num == -1) all sPLT entries */
339
   if ((mask & PNG_FREE_SPLT) & info_ptr->free_me)
340
   {
341
      if (num != -1)
342
      {
343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363
         if (info_ptr->splt_palettes)
         {
            png_free(png_ptr, info_ptr->splt_palettes[num].name);
            png_free(png_ptr, info_ptr->splt_palettes[num].entries);
            info_ptr->splt_palettes[num].name = NULL;
            info_ptr->splt_palettes[num].entries = NULL;
         }
      }
      else
      {
         if (info_ptr->splt_palettes_num)
         {
            int i;
            for (i = 0; i < (int)info_ptr->splt_palettes_num; i++)
               png_free_data(png_ptr, info_ptr, PNG_FREE_SPLT, i);

            png_free(png_ptr, info_ptr->splt_palettes);
            info_ptr->splt_palettes = NULL;
            info_ptr->splt_palettes_num = 0;
         }
         info_ptr->valid &= ~PNG_INFO_sPLT;
364
      }
365 366 367
   }
#endif

368
#ifdef PNG_UNKNOWN_CHUNKS_SUPPORTED
369 370 371 372 373
   if (png_ptr->unknown_chunk.data)
   {
      png_free(png_ptr, png_ptr->unknown_chunk.data);
      png_ptr->unknown_chunk.data = NULL;
   }
374

375
   if ((mask & PNG_FREE_UNKN) & info_ptr->free_me)
376
   {
377 378 379 380 381 382 383 384 385 386 387
      if (num != -1)
      {
          if (info_ptr->unknown_chunks)
          {
             png_free(png_ptr, info_ptr->unknown_chunks[num].data);
             info_ptr->unknown_chunks[num].data = NULL;
          }
      }
      else
      {
         int i;
388

389 390 391 392
         if (info_ptr->unknown_chunks_num)
         {
            for (i = 0; i < (int)info_ptr->unknown_chunks_num; i++)
               png_free_data(png_ptr, info_ptr, PNG_FREE_UNKN, i);
393

394 395 396 397 398
            png_free(png_ptr, info_ptr->unknown_chunks);
            info_ptr->unknown_chunks = NULL;
            info_ptr->unknown_chunks_num = 0;
         }
      }
399 400 401
   }
#endif

402
#ifdef PNG_hIST_SUPPORTED
403
   /* Free any hIST entry */
404 405 406 407 408 409
   if ((mask & PNG_FREE_HIST)  & info_ptr->free_me)
   {
      png_free(png_ptr, info_ptr->hist);
      info_ptr->hist = NULL;
      info_ptr->valid &= ~PNG_INFO_hIST;
   }
410 411
#endif

412
   /* Free any PLTE entry that was internally allocated */
413 414 415 416 417 418 419
   if ((mask & PNG_FREE_PLTE) & info_ptr->free_me)
   {
      png_zfree(png_ptr, info_ptr->palette);
      info_ptr->palette = NULL;
      info_ptr->valid &= ~PNG_INFO_PLTE;
      info_ptr->num_palette = 0;
   }
420

421
#ifdef PNG_INFO_IMAGE_SUPPORTED
422
   /* Free any image bits attached to the info structure */
423 424 425 426 427 428 429 430 431 432 433 434 435
   if ((mask & PNG_FREE_ROWS) & info_ptr->free_me)
   {
      if (info_ptr->row_pointers)
      {
         int row;
         for (row = 0; row < (int)info_ptr->height; row++)
         {
            png_free(png_ptr, info_ptr->row_pointers[row]);
         }
         png_free(png_ptr, info_ptr->row_pointers);
      }
      info_ptr->valid &= ~PNG_INFO_IDAT;
   }
436
#endif
437

438
   if (num == -1)
439
      info_ptr->free_me &= ~mask;
440
   else
441
      info_ptr->free_me &= ~(mask & ~PNG_FREE_MUL);
442
}
443

A
Andreas Dilger 已提交
444
/* This is an internal routine to free any memory that the info struct is
A
Andreas Dilger 已提交
445 446 447
 * pointing to before re-using it or freeing the struct itself.  Recall
 * that png_free() checks for NULL pointers for us.
 */
448
void /* PRIVATE */
A
Andreas Dilger 已提交
449 450
png_info_destroy(png_structp png_ptr, png_infop info_ptr)
{
451
   png_debug(1, "in png_info_destroy");
452 453

   png_free_data(png_ptr, info_ptr, PNG_FREE_ALL, -1);
454

455
#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
456 457
   if (png_ptr->num_chunk_list)
   {
458 459
      png_free(png_ptr, png_ptr->chunk_list);
      png_ptr->num_chunk_list = 0;
460
   }
A
Andreas Dilger 已提交
461
#endif
462

463
   png_info_init_3(&info_ptr, png_sizeof(png_info));
G
Guy Schalnat 已提交
464
}
465
#endif /* defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED) */
G
Guy Schalnat 已提交
466

G
Guy Schalnat 已提交
467
/* This function returns a pointer to the io_ptr associated with the user
468 469 470
 * functions.  The application should free any memory associated with this
 * pointer before png_write_destroy() or png_read_destroy() are called.
 */
471
png_voidp PNGAPI
G
Guy Schalnat 已提交
472 473
png_get_io_ptr(png_structp png_ptr)
{
474 475
   if (png_ptr == NULL)
      return (NULL);
476
   return (png_ptr->io_ptr);
G
Guy Schalnat 已提交
477
}
A
Andreas Dilger 已提交
478

479
#if defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED)
480
#ifdef PNG_STDIO_SUPPORTED
A
Andreas Dilger 已提交
481
/* Initialize the default input/output functions for the PNG file.  If you
482
 * use your own read or write routines, you can call either png_set_read_fn()
483 484 485
 * or png_set_write_fn() instead of png_init_io().  If you have defined
 * PNG_NO_STDIO, you must use a function of your own because "FILE *" isn't
 * necessarily available.
486
 */
487
void PNGAPI
488
png_init_io(png_structp png_ptr, png_FILE_p fp)
G
Guy Schalnat 已提交
489
{
490
   png_debug(1, "in png_init_io");
491

492 493
   if (png_ptr == NULL)
      return;
494

G
Guy Schalnat 已提交
495 496
   png_ptr->io_ptr = (png_voidp)fp;
}
A
Andreas Dilger 已提交
497
#endif
498

499
#ifdef PNG_TIME_RFC1123_SUPPORTED
500 501 502
/* Convert the supplied time into an RFC 1123 string suitable for use in
 * a "Creation Time" or other text-based time string.
 */
503
png_charp PNGAPI
504 505 506
png_convert_to_rfc1123(png_structp png_ptr, png_timep ptime)
{
   static PNG_CONST char short_months[12][4] =
507 508
        {"Jan", "Feb", "Mar", "Apr", "May", "Jun",
         "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"};
509

510 511
   if (png_ptr == NULL)
      return (NULL);
512
   if (png_ptr->time_buffer == NULL)
513 514 515 516
   {
      png_ptr->time_buffer = (png_charp)png_malloc(png_ptr, (png_uint_32)(29*
         png_sizeof(char)));
   }
517 518

#ifdef USE_FAR_KEYWORD
519 520
   {
      char near_time_buf[29];
521
      png_snprintf6(near_time_buf, 29, "%d %s %d %02d:%02d:%02d +0000",
522 523 524 525
          ptime->day % 32, short_months[(ptime->month - 1) % 12],
          ptime->year, ptime->hour % 24, ptime->minute % 60,
          ptime->second % 61);
      png_memcpy(png_ptr->time_buffer, near_time_buf,
526
          29*png_sizeof(char));
527
   }
528
#else
529
   png_snprintf6(png_ptr->time_buffer, 29, "%d %s %d %02d:%02d:%02d +0000",
530 531 532
       ptime->day % 32, short_months[(ptime->month - 1) % 12],
       ptime->year, ptime->hour % 24, ptime->minute % 60,
       ptime->second % 61);
533 534 535 536
#endif
   return ((png_charp)png_ptr->time_buffer);
}
#endif /* PNG_TIME_RFC1123_SUPPORTED */
537

538
#endif /* defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED) */
539

540
png_charp PNGAPI
541 542
png_get_copyright(png_structp png_ptr)
{
543
   png_ptr = png_ptr;  /* Silence compiler warning about unused png_ptr */
544 545 546 547
#ifdef PNG_STRING_COPYRIGHT
      return PNG_STRING_COPYRIGHT
#else
#ifdef __STDC__
548
   return ((png_charp) PNG_STRING_NEWLINE \
549
     "libpng version x 1.4.0beta84 - September 30, 2009" PNG_STRING_NEWLINE \
550
     "Copyright (c) 1998-2009 Glenn Randers-Pehrson" PNG_STRING_NEWLINE \
551 552 553
     "Copyright (c) 1996-1997 Andreas Dilger" PNG_STRING_NEWLINE \
     "Copyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc." \
     PNG_STRING_NEWLINE);
554
#else
555
      return ((png_charp) "libpng version 1.4.0beta84 - September 30, 2009\
556
      Copyright (c) 1998-2009 Glenn Randers-Pehrson\
557 558 559 560
      Copyright (c) 1996-1997 Andreas Dilger\
      Copyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.");
#endif
#endif
561
}
562

563
/* The following return the library version as a short string in the
564 565 566 567 568 569
 * format 1.0.0 through 99.99.99zz.  To get the version of *.h files
 * used with your application, print out PNG_LIBPNG_VER_STRING, which
 * is defined in png.h.
 * Note: now there is no difference between png_get_libpng_ver() and
 * png_get_header_ver().  Due to the version_nn_nn_nn typedef guard,
 * it is guaranteed that png.c uses the correct version of png.h.
570
 */
571
png_charp PNGAPI
572 573 574
png_get_libpng_ver(png_structp png_ptr)
{
   /* Version of *.c files used when building libpng */
575
   png_ptr = png_ptr;  /* Silence compiler warning about unused png_ptr */
576
   return ((png_charp) PNG_LIBPNG_VER_STRING);
577 578
}

579
png_charp PNGAPI
580 581 582
png_get_header_ver(png_structp png_ptr)
{
   /* Version of *.h files used when building libpng */
583
   png_ptr = png_ptr;  /* Silence compiler warning about unused png_ptr */
584
   return ((png_charp) PNG_LIBPNG_VER_STRING);
585 586
}

587
png_charp PNGAPI
588 589 590
png_get_header_version(png_structp png_ptr)
{
   /* Returns longer string containing both version and date */
591
   png_ptr = png_ptr;  /* Silence compiler warning about unused png_ptr */
592
#ifdef __STDC__
593 594 595 596
   return ((png_charp) PNG_HEADER_VERSION_STRING
#ifndef PNG_READ_SUPPORTED
   "     (NO READ SUPPORT)"
#endif
597
   PNG_STRING_NEWLINE);
598 599 600
#else
   return ((png_charp) PNG_HEADER_VERSION_STRING);
#endif
601 602
}

603
#if defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED)
604
#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
605
int PNGAPI
606 607
png_handle_as_unknown(png_structp png_ptr, png_bytep chunk_name)
{
608
   /* Check chunk_name and return "keep" value if it's on the list, else 0 */
609 610
   int i;
   png_bytep p;
611
   if (png_ptr == NULL || chunk_name == NULL || png_ptr->num_chunk_list<=0)
612
      return 0;
613 614
   p = png_ptr->chunk_list + png_ptr->num_chunk_list*5 - 5;
   for (i = png_ptr->num_chunk_list; i; i--, p -= 5)
615
      if (!png_memcmp(chunk_name, p, 4))
616
        return ((int)*(p + 4));
617 618 619
   return 0;
}
#endif
620 621

/* This function, added to libpng-1.0.6g, is untested. */
622
int PNGAPI
623 624
png_reset_zstream(png_structp png_ptr)
{
625 626
   if (png_ptr == NULL)
      return Z_STREAM_ERROR;
627 628
   return (inflateReset(&png_ptr->zstream));
}
629
#endif /* defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED) */
630

631
/* This function was added to libpng-1.0.7 */
632 633 634 635
png_uint_32 PNGAPI
png_access_version_number(void)
{
   /* Version of *.c files used when building libpng */
636
   return((png_uint_32) PNG_LIBPNG_VER);
637 638 639
}


640

641 642 643 644 645 646
#if defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED)
#ifdef PNG_SIZE_T
/* Added at libpng version 1.2.6 */
   PNG_EXTERN png_size_t PNGAPI png_convert_size PNGARG((size_t size));
png_size_t PNGAPI
png_convert_size(size_t size)
647
{
648 649 650
   if (size > (png_size_t)-1)
      PNG_ABORT();  /* We haven't got access to png_ptr, so no png_error() */
   return ((png_size_t)size);
651
}
652
#endif /* PNG_SIZE_T */
653

654
/* Added at libpng version 1.2.34 and 1.4.0 (moved from pngset.c) */
655 656
#ifdef PNG_cHRM_SUPPORTED
#ifdef PNG_CHECK_cHRM_SUPPORTED
657

658
/*
659 660 661 662 663 664 665 666 667 668 669 670
 *    Multiply two 32-bit numbers, V1 and V2, using 32-bit
 *    arithmetic, to produce a 64 bit result in the HI/LO words.
 *
 *                  A B
 *                x C D
 *               ------
 *              AD || BD
 *        AC || CB || 0
 *
 *    where A and B are the high and low 16-bit words of V1,
 *    C and D are the 16-bit words of V2, AD is the product of
 *    A and D, and X || Y is (X << 16) + Y.
671 672
*/

673 674
void /* PRIVATE */
png_64bit_product (long v1, long v2, unsigned long *hi_product,
675 676
   unsigned long *lo_product)
{
677 678
   int a, b, c, d;
   long lo, hi, x, y;
679

680 681 682 683
   a = (v1 >> 16) & 0xffff;
   b = v1 & 0xffff;
   c = (v2 >> 16) & 0xffff;
   d = v2 & 0xffff;
684

685 686 687
   lo = b * d;                   /* BD */
   x = a * d + c * b;            /* AD + CB */
   y = ((lo >> 16) & 0xffff) + x;
688

689 690
   lo = (lo & 0xffff) | ((y & 0xffff) << 16);
   hi = (y >> 16) & 0xffff;
691

692
   hi += a * c;                  /* AC */
693

694 695
   *hi_product = (unsigned long)hi;
   *lo_product = (unsigned long)lo;
696
}
697

698
int /* PRIVATE */
699 700 701 702 703 704
png_check_cHRM_fixed(png_structp png_ptr,
   png_fixed_point white_x, png_fixed_point white_y, png_fixed_point red_x,
   png_fixed_point red_y, png_fixed_point green_x, png_fixed_point green_y,
   png_fixed_point blue_x, png_fixed_point blue_y)
{
   int ret = 1;
705
   unsigned long xy_hi,xy_lo,yx_hi,yx_lo;
706 707

   png_debug(1, "in function png_check_cHRM_fixed");
708

709 710 711
   if (png_ptr == NULL)
      return 0;

712 713 714 715
   if (white_x < 0 || white_y <= 0 ||
         red_x < 0 ||   red_y <  0 ||
       green_x < 0 || green_y <  0 ||
        blue_x < 0 ||  blue_y <  0)
716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733
   {
      png_warning(png_ptr,
        "Ignoring attempt to set negative chromaticity value");
      ret = 0;
   }
   if (white_x > (png_fixed_point) PNG_UINT_31_MAX ||
       white_y > (png_fixed_point) PNG_UINT_31_MAX ||
         red_x > (png_fixed_point) PNG_UINT_31_MAX ||
         red_y > (png_fixed_point) PNG_UINT_31_MAX ||
       green_x > (png_fixed_point) PNG_UINT_31_MAX ||
       green_y > (png_fixed_point) PNG_UINT_31_MAX ||
        blue_x > (png_fixed_point) PNG_UINT_31_MAX ||
        blue_y > (png_fixed_point) PNG_UINT_31_MAX )
   {
      png_warning(png_ptr,
        "Ignoring attempt to set chromaticity value exceeding 21474.83");
      ret = 0;
   }
734
   if (white_x > 100000L - white_y)
735 736 737 738
   {
      png_warning(png_ptr, "Invalid cHRM white point");
      ret = 0;
   }
739
   if (red_x > 100000L - red_y)
740 741 742 743
   {
      png_warning(png_ptr, "Invalid cHRM red point");
      ret = 0;
   }
744
   if (green_x > 100000L - green_y)
745 746 747 748
   {
      png_warning(png_ptr, "Invalid cHRM green point");
      ret = 0;
   }
749
   if (blue_x > 100000L - blue_y)
750 751 752 753
   {
      png_warning(png_ptr, "Invalid cHRM blue point");
      ret = 0;
   }
754 755 756 757 758 759 760 761 762 763 764

   png_64bit_product(green_x - red_x, blue_y - red_y, &xy_hi, &xy_lo);
   png_64bit_product(green_y - red_y, blue_x - red_x, &yx_hi, &yx_lo);

   if (xy_hi == yx_hi && xy_lo == yx_lo)
   {
      png_warning(png_ptr,
         "Ignoring attempt to set cHRM RGB triangle with zero area");
      ret = 0;
   }

765 766
   return ret;
}
767
#endif /* PNG_CHECK_cHRM_SUPPORTED */
768
#endif /* PNG_cHRM_SUPPORTED */
769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792

void /* PRIVATE */
png_check_IHDR(png_structp png_ptr,
   png_uint_32 width, png_uint_32 height, int bit_depth,
   int color_type, int interlace_type, int compression_type,
   int filter_type)
{
   int error = 0;

   /* Check for width and height valid values */
   if (width == 0)
   {
      png_warning(png_ptr, "Image width is zero in IHDR");
      error = 1;
   }

   if (height == 0)
   {
      png_warning(png_ptr, "Image height is zero in IHDR");
      error = 1;
   }

#ifdef PNG_SET_USER_LIMITS_SUPPORTED
   if (width > png_ptr->user_width_max || width > PNG_USER_WIDTH_MAX)
793 794 795
#else
   if (width > PNG_USER_WIDTH_MAX)
#endif
796 797
   {
      png_warning(png_ptr, "Image width exceeds user limit in IHDR");
798 799 800 801 802 803 804 805
      if ((width >> 16) == height)
      {
         /* This is likely to be caused by passing consecutive addresses
          * of 16-bit width and height variables to png_get_IHDR(), which
          * overflowed when we tried to fill them with 31-bit data.
          */ 
         png_warning(png_ptr, "High bytes of width == low bytes of height");
      }
806 807 808
      error = 1;
   }

809
#ifdef PNG_SET_USER_LIMITS_SUPPORTED
810 811 812
   if (height > png_ptr->user_height_max || height > PNG_USER_HEIGHT_MAX)
#else
   if (height > PNG_USER_HEIGHT_MAX)
813
#endif
814 815 816 817 818
   {
      png_warning(png_ptr, "Image height exceeds user limit in IHDR");
      error = 1;
   }

819
   if (width > PNG_UINT_31_MAX)
820
   {
821
      png_warning(png_ptr, "Invalid image width in IHDR");
822 823 824 825 826
      error = 1;
   }

   if ( height > PNG_UINT_31_MAX)
   {
827
      png_warning(png_ptr, "Invalid image height in IHDR");
828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890
      error = 1;
   }

   if ( width > (PNG_UINT_32_MAX
                 >> 3)      /* 8-byte RGBA pixels */
                 - 64       /* bigrowbuf hack */
                 - 1        /* filter byte */
                 - 7*8      /* rounding of width to multiple of 8 pixels */
                 - 8)       /* extra max_pixel_depth pad */
      png_warning(png_ptr, "Width is too large for libpng to process pixels");

   /* Check other values */
   if (bit_depth != 1 && bit_depth != 2 && bit_depth != 4 &&
       bit_depth != 8 && bit_depth != 16)
   {
      png_warning(png_ptr, "Invalid bit depth in IHDR");
      error = 1;
   }

   if (color_type < 0 || color_type == 1 ||
       color_type == 5 || color_type > 6)
   {
      png_warning(png_ptr, "Invalid color type in IHDR");
      error = 1;
   }

   if (((color_type == PNG_COLOR_TYPE_PALETTE) && bit_depth > 8) ||
       ((color_type == PNG_COLOR_TYPE_RGB ||
         color_type == PNG_COLOR_TYPE_GRAY_ALPHA ||
         color_type == PNG_COLOR_TYPE_RGB_ALPHA) && bit_depth < 8))
   {
      png_warning(png_ptr, "Invalid color type/bit depth combination in IHDR");
      error = 1;
   }

   if (interlace_type >= PNG_INTERLACE_LAST)
   {
      png_warning(png_ptr, "Unknown interlace method in IHDR");
      error = 1;
   }

   if (compression_type != PNG_COMPRESSION_TYPE_BASE)
   {
      png_warning(png_ptr, "Unknown compression method in IHDR");
      error = 1;
   }

#ifdef PNG_MNG_FEATURES_SUPPORTED
   /* Accept filter_method 64 (intrapixel differencing) only if
    * 1. Libpng was compiled with PNG_MNG_FEATURES_SUPPORTED and
    * 2. Libpng did not read a PNG signature (this filter_method is only
    *    used in PNG datastreams that are embedded in MNG datastreams) and
    * 3. The application called png_permit_mng_features with a mask that
    *    included PNG_FLAG_MNG_FILTER_64 and
    * 4. The filter_method is 64 and
    * 5. The color_type is RGB or RGBA
    */
   if ((png_ptr->mode & PNG_HAVE_PNG_SIGNATURE) &&
       png_ptr->mng_features_permitted)
      png_warning(png_ptr, "MNG features are not allowed in a PNG datastream");

   if (filter_type != PNG_FILTER_TYPE_BASE)
   {
891
      if (!((png_ptr->mng_features_permitted & PNG_FLAG_MNG_FILTER_64) &&
892
         (filter_type == PNG_INTRAPIXEL_DIFFERENCING) &&
893
         ((png_ptr->mode & PNG_HAVE_PNG_SIGNATURE) == 0) &&
894 895
         (color_type == PNG_COLOR_TYPE_RGB ||
         color_type == PNG_COLOR_TYPE_RGB_ALPHA)))
896 897 898 899
      {
         png_warning(png_ptr, "Unknown filter method in IHDR");
         error = 1;
      }
900

901 902 903 904 905 906
      if (png_ptr->mode & PNG_HAVE_PNG_SIGNATURE)
      {
         png_warning(png_ptr, "Invalid filter method in IHDR");
         error = 1;
      }
   }
907 908 909 910 911 912 913 914 915 916 917 918

#else
   if (filter_type != PNG_FILTER_TYPE_BASE)
   {
      png_warning(png_ptr, "Unknown filter method in IHDR");
      error = 1;
   }
#endif

   if (error == 1)
      png_error(png_ptr, "Invalid IHDR data");
}
919
#endif /* defined(PNG_READ_SUPPORTED) || defined(PNG_WRITE_SUPPORTED) */