Moved it from bin_PROGRAMS to check_PROGRAMS in Makefile.am so it will be
built but not installed.

chunk reading.

now that iCCP profile_length honors PNG_USER_CHUNK_MALLOC_MAX.

The code now validates the ICC profile length against the user chunk limit
before the buffer is allocated, as opposed to doing it while the buffer is read.

This removes the potential to consume virtual address space with a carefully
crafted ICC profile; only an issue on 32-bit systems where a valid profile can
be up to 2^32-4 bytes in length.  libpng never writes beyond the application
supplied limit, but previously it did allocate a buffer of the size specified in
the profile header.  The exploitability of this is almost zero; the address
space is released as soon as the PNG read completes.

Also clean up PNG_DEBUG compile of pngtest.c.
Signed-off-by: NJohn Bowler <jbowler@acm.org>

png_error() on failure.  Reject oversized iCCP profile immediately.

Updated contrib/intel/intel_sse.patch

only one filter is a candidate for selection. This trades off code size (added
png_setup_*_row_only() functions) for speed.