Created attachment 162950 [details] patch for update * Fixed a double-free bug. There was a "free" of the sPLT chunk structure in pngcrush and then again in png.c (Bug report by Brian Carpenter). * Added common-law trademark notice and export control information. * Rearranged some paragraphs in the comments at the beginning of pngcrush.c * Increased some buffer sizes in an attempt to prevent possible overflows.
Created attachment 162951 [details] portupgrade log
Thanks Anton. Can you please confirm this passes QA please (portlint/poudriere) Unfortunately portupgrade/plain installation doesn't run the requisite checks.
(In reply to Kubilay Kocak from comment #2) Unfortunately, I don't have access to any poudriere instance right now, and RedPorts is down. :-( I can try to install Poudriere somewhere in the next few days if you wish.
@Anton, Thanks for the quick response. In the meantime, you may include (as an attachment), the output of: make stage && make check-plist && make stage-qa && make package
Created attachment 162952 [details] make: stage & qa log Tested on FreeBSD 10.1-RELEASE-p12 amd64.
Created attachment 162953 [details] make: stage & qa log Oops, incorrect output redirection, revised version
test-builds done on 11-cur, 10.2a+i, 9.3a, all fine.
A commit references this bug: Author: pi Date: Fri Nov 20 19:50:01 UTC 2015 New revision: 402097 URL: https://svnweb.freebsd.org/changeset/ports/402097 Log: graphics/pngcrush: 1.7.86 -> 1.7.87 - Fixed a double-free bug. There was a "free" of the sPLT chunk structure in pngcrush and then again in png.c (Bug report by Brian Carpenter). - Added common-law trademark notice and export control information. - Rearranged some paragraphs in the comments at the beginning of pngcrush.c - Increased some buffer sizes in an attempt to prevent possible overflows. PR: 204421 Submitted by: Anton Sayetsky <vsasjason@gmail.com> (maintainer) Changes: head/graphics/pngcrush/Makefile head/graphics/pngcrush/distinfo
Committed, thanks.