| commit | b0729b8fbb18dc1340ade628facf3f1cee498bfb | [log] [tgz] |
|---|---|---|
| author | Ben Wagner <bungeman@chromium.org> | Mon Mar 15 18:32:24 2021 |
| committer | Werner Lemberg <wl@gnu.org> | Tue Mar 16 07:47:45 2021 |
| tree | 18d9d01f8eacad45f1e8f5790b00f69cee4b7e02 | |
| parent | 66005cbae1ff19ab15c7ade1a3bd22665be2a9fc [diff] |
[sfnt] Fix memory leak in png loading. Reported as https://bugs.chromium.org/p/chromium/issues/detail?id=1182552 Memory is allocated and the pointer assigned to `rows` inside a 'setjmp' scope. This memory must be freed outside the 'setjmp' scope after a 'longjmp'. Since `rows` is a local and modified inside the 'setjmp' scope it must be marked volatile or it will have an indeterminate value after the 'longjmp'. * src/sfnt/pngshim.c (Load_SBit_Png): Fix memory leak of `rows`.