1 |
|
2 |
# HG changeset patch |
3 |
# User Glenn Randers-Pehrson <glennrp+bmo@gmail.com> |
4 |
# Date 1499704855 14400 |
5 |
# Node ID d0a76868ca37ae482eb3e8cecbb9150c5348ffe8 |
6 |
# Parent b24f2a9b0dd70506d429e537ff3e81532b5bfc23 |
7 |
coders/png.c (ReadMNGImage): Fix out-of-order CloseBlob() |
8 |
|
9 |
and DestroyImageList() that caused a use-after-free crash. |
10 |
|
11 |
diff -r b24f2a9b0dd7 -r d0a76868ca37 coders/png.c |
12 |
--- a/coders/png.c Mon Jul 10 11:31:05 2017 -0400 |
13 |
+++ b/coders/png.c Mon Jul 10 12:40:55 2017 -0400 |
14 |
@@ -5161,8 +5161,8 @@ |
15 |
|
16 |
if (image == (Image *) NULL) |
17 |
{ |
18 |
+ CloseBlob(previous); |
19 |
DestroyImageList(previous); |
20 |
- CloseBlob(previous); |
21 |
MngInfoFreeStruct(mng_info,&have_mng_structure); |
22 |
return((Image *) NULL); |
23 |
} |
24 |
|