randy408 / libspng

Simple, modern libpng alternative
https://libspng.org
BSD 2-Clause "Simplified" License
741 stars 75 forks source link

Consider revising error handling for large chunks #250

Open randy408 opened 1 year ago

randy408 commented 1 year ago

libpng has merged a patch from Chromium and included it in the v1.6.39 release, making PNG's over the PNG_USER_CHUNK_MALLOC_MAX limit only a benign error, meaning the image can still be displayed despite excessively large metadata chunks: https://github.com/glennrp/libpng/commit/33de006e127ffc330f12396bf6732682f804d115

The solution is sketchy, "Though it means we do allow libpng to allocate more than PNG_USER_CHUNK_MALLOC_MAX", a better solution should be chosen for spng.