github.com/kaydxh/golang@v0.0.131/pkg/gocv/cgo/third_path/graphics-magick/share/doc/GraphicsMagick/www/ChangeLog-2019.html (about)

     1  <?xml version="1.0" encoding="utf-8" ?>
     2  <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
     3  <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
     4  <head>
     5  <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
     6  <meta name="generator" content="Docutils 0.15.2: http://docutils.sourceforge.net/" />
     7  <title>ChangeLog-2019.rst</title>
     8  <link rel="stylesheet" href="docutils-articles.css" type="text/css" />
     9  </head>
    10  <body>
    11  
    12  <div class="banner">
    13  <img src="images/gm-107x76.png" alt="GraphicMagick logo" width="107" height="76" />
    14  <span class="title">GraphicsMagick</span>
    15  <form action="http://www.google.com/search">
    16  	<input type="hidden" name="domains" value="www.graphicsmagick.org" />
    17  	<input type="hidden" name="sitesearch" value="www.graphicsmagick.org" />
    18      <span class="nowrap"><input type="text" name="q" size="25" maxlength="255" />&nbsp;<input type="submit" name="sa" value="Search" /></span>
    19  </form>
    20  </div>
    21  
    22  <div class="navmenu">
    23  <ul>
    24  <li><a href="index.html">Home</a></li>
    25  <li><a href="project.html">Project</a></li>
    26  <li><a href="download.html">Download</a></li>
    27  <li><a href="README.html">Install</a></li>
    28  <li><a href="Hg.html">Source</a></li>
    29  <li><a href="NEWS.html">News</a> </li>
    30  <li><a href="utilities.html">Utilities</a></li>
    31  <li><a href="programming.html">Programming</a></li>
    32  <li><a href="reference.html">Reference</a></li>
    33  </ul>
    34  </div>
    35  <div class="document">
    36  
    37  
    38  <p>2019-12-31  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
    39  <blockquote>
    40  <ul class="simple">
    41  <li>coders/gradient.c (ReadGRADIENTImage): QueryColorDatabase() only
    42  throws a warning so allow the warning to propagate to the user
    43  rather than failing to report a useful message at all.</li>
    44  </ul>
    45  </blockquote>
    46  <p>2019-12-30  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
    47  <blockquote>
    48  <ul class="simple">
    49  <li>magick/gradient.c (GradientImage): OpenMP portability requires
    50  that loop variable be signed.</li>
    51  </ul>
    52  </blockquote>
    53  <p>2019-12-30  Fojtik Jaroslav  &lt;<a class="reference external" href="mailto:JaFojtik&#37;&#52;&#48;seznam&#46;cz">JaFojtik<span>&#64;</span>seznam<span>&#46;</span>cz</a>&gt;</p>
    54  <blockquote>
    55  <ul class="simple">
    56  <li>magick/gradient.c: Visual studio does not compile file without
    57  this fix.</li>
    58  </ul>
    59  </blockquote>
    60  <p>2019-12-30  Fojtik Jaroslav  &lt;<a class="reference external" href="mailto:JaFojtik&#37;&#52;&#48;seznam&#46;cz">JaFojtik<span>&#64;</span>seznam<span>&#46;</span>cz</a>&gt;</p>
    61  <blockquote>
    62  <ul class="simple">
    63  <li>VisualMagickconfigureconfigure.cpp Add option for speed optimisation
    64  to achieve better performance.</li>
    65  </ul>
    66  </blockquote>
    67  <p>2019-12-29  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
    68  <blockquote>
    69  <ul class="simple">
    70  <li>magick/version.h.in: Bump copyright years.</li>
    71  <li>magick/image.c (DisplayImages): Fix return status.  Was
    72  returning inverted return status.</li>
    73  <li>coders/gradient.c (ReadGRADIENTImage): Support the
    74  &quot;gradient:direction&quot; definition to produce produce additional
    75  gradient vector directions corresponding to South, North, West,
    76  East, NorthWest, NorthEast, SouthWest, and SouthEast.  This
    77  support is similar to a useful feature added in ImageMagick
    78  6.9.2.5 although there is no claim that the results are identical,
    79  even if the resulting images appear to be visually
    80  indistinguishable.</li>
    81  <li>magick/gradient.c (GradientImage): Add support for using the
    82  image 'gravity' attribute to produce additional gradient vector
    83  directions corresponding to SouthGravity (the previously-existing
    84  default), NorthGravity, WestGravity, EastGravity,
    85  NorthWestGravity, NorthEastGravity, SouthWestGravity, and
    86  SouthEastGravity.  Gradient images are updated to be PseudoClass
    87  (color-mapped), if possible.</li>
    88  </ul>
    89  </blockquote>
    90  <p>2019-12-28  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
    91  <blockquote>
    92  <ul class="simple">
    93  <li>magick/gradient.c (GradientImage): Output PseudoClass images if
    94  we can.</li>
    95  <li>coders/pcx.c (WritePCXImage): Fix heap overflow in PCX writer
    96  when bytes per line value overflows its 16-bit storage unit.
    97  Fixes SourceForge bug #619 &quot;heap-buffer-overflow in WritePCXImage&quot;
    98  reported by Suhwan Song.</li>
    99  <li>magick/gradient.c (GradientImage): Gradient levels were still
   100  not spot-on.  Now they are.  Unfortunately, this necessitated
   101  re-generating reference test images based on gradient since the
   102  gradient output has changed a little bit more than the test error
   103  margins allow.</li>
   104  </ul>
   105  </blockquote>
   106  <p>2019-12-25  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   107  <blockquote>
   108  <ul class="simple">
   109  <li>magick/render.c (DrawImage): Test gradient image resource limits
   110  using the proper API.</li>
   111  <li>magick/resource.c (ResourceInfinity): Fix definition of
   112  ResourceInfinity.  Due to parenthesis in the wrong place, the
   113  defined value was -1 rather than the maximum range value.  The
   114  effect of this is that GetMagickResource() would return -1 rather
   115  than the maximum range value for the return type as documented.
   116  Regression was added on Saturday, March 09, 2019 in the 1.3.32
   117  release via changeset 15927:a5318823758c.</li>
   118  <li>tests/rwfile.c (main): Allow Ghostscript supported formats to be
   119  a bit lossy.</li>
   120  <li>tests/rwblob.c (main): Allow Ghostscript supported formats to be
   121  a bit lossy.</li>
   122  <li>magick/gradient.c (GradientImage): Compute blending alpha with
   123  double precision for more precision.</li>
   124  </ul>
   125  </blockquote>
   126  <p>2019-12-24  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   127  <blockquote>
   128  <ul class="simple">
   129  <li>NEWS.txt: Updates in preparation for 1.3.34 release.</li>
   130  </ul>
   131  </blockquote>
   132  <p>2019-12-22  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   133  <blockquote>
   134  <ul class="simple">
   135  <li>NEWS.txt: Update with changes since the last GM release.</li>
   136  <li>coders/png.c (png_read_raw_profile): Use size_t type to store
   137  profile length and 'nibbles'.  Use safer way to test for profile
   138  buffer overflow.
   139  (ReadOnePNGImage): Use size_t type to store 'ping_rowbytes',
   140  'length', and 'row_offset'.  Check png_pixels allocation for
   141  arithemetic overflow when computing the required allocation size.</li>
   142  <li>coders/tiff.c (WriteNewsProfile): Use size_t type to store
   143  profile length.</li>
   144  <li>coders/pict.c (WritePICTImage): Avoid 'alloc-size-larger-than'
   145  warning from GCC when allocating row_bytes.</li>
   146  </ul>
   147  </blockquote>
   148  <p>2019-12-21  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   149  <blockquote>
   150  <ul class="simple">
   151  <li>tiff/libtiff/tiffconf.h: Add standard/common libtiff 'SUPPORT'
   152  options which are used in full-fledged Autoconf/Cmake libtiff
   153  builds but were missing from the Visual C template file.  In
   154  particular, WebP is now supported and JBIG is somewhat supported.</li>
   155  <li>VisualMagick/jbig/libjbig/LIBRARY.txt (EXCLUDE): Remove
   156  tstcodec85.c from JBIG library build.</li>
   157  <li>VisualMagick/configure/configure.cpp: Add JBIG library to
   158  include path when building libraries.  Add WebP as a dependency
   159  when building libtiff.</li>
   160  </ul>
   161  </blockquote>
   162  <p>2019-12-16  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   163  <blockquote>
   164  <ul class="simple">
   165  <li>magick/nt_base.h (&quot;C&quot;): Assume that float versions of functions
   166  became available in Visual Studio 2008.</li>
   167  </ul>
   168  </blockquote>
   169  <p>2019-12-15  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   170  <blockquote>
   171  <ul class="simple">
   172  <li>magick/log.c (InitializeLogInfo): Using the compiled-in
   173  defaults, always log to stderr by default, even under Microsoft
   174  Windows.  The logging output may then be diverted to
   175  'win32eventlog' as soon as a log.mgk file is loaded if that is
   176  desired.  This should not be much of a problem because loading a
   177  log.mgk file is the first thing that the library attempts to do.
   178  This change is made due to users and developers being baffled at
   179  not seeing any log output due to the log output going to the (very
   180  unfriendly) Windows application log.</li>
   181  <li>webp: libwebp is updated to the 1.0.3 release.</li>
   182  </ul>
   183  </blockquote>
   184  <p>2019-12-15  Fojtik Jaroslav  &lt;<a class="reference external" href="mailto:JaFojtik&#37;&#52;&#48;seznam&#46;cz">JaFojtik<span>&#64;</span>seznam<span>&#46;</span>cz</a>&gt;</p>
   185  <blockquote>
   186  <ul class="simple">
   187  <li>magick/nt_base.c Fix user only installation of Ghostscript.</li>
   188  </ul>
   189  </blockquote>
   190  <p>2019-12-14  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   191  <blockquote>
   192  <ul class="simple">
   193  <li>rungm.sh.in (DIRSEP): DIRSEP should always use Unix conventions for
   194  Autotools-based builds.</li>
   195  <li>magick/module.h (&quot;C&quot;): Eliminiate redundant and conflicting
   196  ListModuleInfo() prototype.</li>
   197  <li>coders/miff.c (ReadMIFFImage): Eliminate warnings in trace
   198  statements.</li>
   199  <li>coders/dib.c (DecodeImage): Eliminate warnings in trace
   200  statements.</li>
   201  <li>coders/bmp.c (DecodeImage): Eliminate warnings in trace
   202  statements.</li>
   203  <li>magick/studio.h (SupportMagickModules): Fix the preprocessor
   204  logic controlling SupportMagickModules, which became broken for
   205  GCC MinGW-based builds starting in the 1.3.29 release when a
   206  &quot;static&quot; module loader was implemented.  Due to an error in the
   207  preprocessor logic, only the &quot;modules&quot; based build was working for
   208  MinGW.  Much thanks to Giovanni Remigi for making us aware of this
   209  issue.</li>
   210  </ul>
   211  </blockquote>
   212  <p>2019-12-12  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   213  <blockquote>
   214  <ul class="simple">
   215  <li>coders/pict.c (WritePICTImage): Throw a writer exception if the
   216  PICT width limit is exceeded. Fixes SourceForge issue 617
   217  &quot;heap-buffer-overflow in function EncodeImage of coders/pict.c&quot;.</li>
   218  </ul>
   219  </blockquote>
   220  <p>2019-12-08  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   221  <blockquote>
   222  <ul class="simple">
   223  <li>jbig: jbigkit is updated to 2.1 release.</li>
   224  <li>libxml: libxml2 is updated to 2.9.10 release.</li>
   225  <li>bzlib: bzip is updated to 1.0.8 release.</li>
   226  <li>zlib: zlib is updated to 1.2.11 release.</li>
   227  <li>png: libpng is updated to 1.6.37 release.</li>
   228  </ul>
   229  </blockquote>
   230  <p>2019-12-07  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   231  <blockquote>
   232  <ul class="simple">
   233  <li>lcms: lcms2 is updated to 2.9 release.</li>
   234  <li>tiff: libtiff is updated to 4.1.0 release.</li>
   235  </ul>
   236  </blockquote>
   237  <p>2019-11-24  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   238  <blockquote>
   239  <ul class="simple">
   240  <li>magick/render.c (DrawPatternPath): Don't leak memory if
   241  fill_pattern or stroke_pattern of cloned draw_info are not null.
   242  Fixes oss-fuzz issue 18948 &quot;graphicsmagick:coder_MVG_fuzzer:
   243  Indirect-leak in CloneImage&quot;.
   244  (PrimitiveInfoRealloc): Clear freshly-allocated PrimitiveInfo
   245  memory.</li>
   246  </ul>
   247  </blockquote>
   248  <p>2019-11-23  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   249  <blockquote>
   250  <ul class="simple">
   251  <li>magick/attribute.c (GenerateEXIFAttribute): Fix oss-fuzz issue
   252  17986 &quot;graphicsmagick:coder_JPG_fuzzer: Heap-buffer-overflow in
   253  GenerateEXIFAttribute&quot;.  This problem likely only happens in
   254  32-bit builds.</li>
   255  </ul>
   256  </blockquote>
   257  <p>2019-11-17  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   258  <blockquote>
   259  <ul class="simple">
   260  <li>coders/png.c (ReadMNGImage): Only magnify the image if the
   261  requested magnification methods are supported.</li>
   262  </ul>
   263  </blockquote>
   264  <p>2019-11-16  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   265  <blockquote>
   266  <ul class="simple">
   267  <li>magick/compress.c (HuffmanDecodeImage): Fix signed overflow on
   268  range check which leads to heap overflow in 32-bit
   269  applications. Requires a relatively large file input compared with
   270  typical fuzzer files (greater than a megabyte) to trigger.
   271  Problem reported to the graphicsmagick-security mail address by
   272  Justin Tripp on 2019-11-13.
   273  (Ascii85Tuple): Fix thread safety issue by requiring caller to
   274  pass in tuple buffer as an argument and having callers allocate
   275  tuple buffer on the stack.</li>
   276  </ul>
   277  </blockquote>
   278  <p>2019-11-10  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   279  <blockquote>
   280  <ul class="simple">
   281  <li>magick/bit_stream.c: Add restrict declarations to slightly
   282  improve performance and decrease code size.</li>
   283  <li>TclMagick/pkgIndex.tcl: Incorporate recommendations from third
   284  problem noted in SourceForge issue #420 &quot;TclMagick issues and
   285  patch&quot;.  This is supposed to help support using an uninstalled
   286  GraphicsMagick and allow the installation path to contain a space.</li>
   287  <li>wand/magick_wand.c (MagickClearException): Destroy any existing
   288  exception info before re-initializing the exception info or else
   289  there will be a memory leak.</li>
   290  <li>TclMagick/generic/libttkcommon.c (myMagickError): Clear
   291  exception from the Wand after it has been reported.  Addresses the
   292  fourth problem noted by SourceForge issue #420 &quot;TclMagick issues
   293  and patch&quot;.  However, MagickClearException() already clears an
   294  exception in the Wand, so a new function is not needed.</li>
   295  <li>TclMagick/unix/m4/tcl.m4: Change hard-coded INSTALL path to
   296  point to config/install-sh.  Re-generated/updated Autotools stuff
   297  by executing the genconf.sh script.  Addresses the first problem
   298  noted by SourceForge issue #420 &quot;TclMagick issues and patch&quot;.</li>
   299  </ul>
   300  </blockquote>
   301  <p>2019-11-02  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   302  <blockquote>
   303  <ul class="simple">
   304  <li>magick/pixel_cache.c (SetNexus): Eliminate warning about
   305  possibly uninitialized variable from primordial GCC 3.4.3.</li>
   306  <li>magick/render.c (ConvertPrimitiveToPath): Eliminate warning that
   307  IsClosedSubPath might be used uninitialized.</li>
   308  <li>magick/common.h (&quot;MAGICK_FALLTHROUGH&quot;): Added a
   309  MAGICK_FALLTHROUGH macro to support the GCC/Clang fallthrough
   310  attribute when the time comes again that it would be useful.</li>
   311  </ul>
   312  </blockquote>
   313  <p>2019-10-19  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   314  <blockquote>
   315  <ul class="simple">
   316  <li>coders/pcx.c (ReadPCXImage): Verify that pixel region is not
   317  negative. Assure that opacity channel is initialized to
   318  opaqueOpacity.  Update DirectClass representation while
   319  PseudoClass representation is updated.  Improve read performance
   320  with uncompressed PCX.</li>
   321  </ul>
   322  </blockquote>
   323  <p>2019-10-16  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   324  <blockquote>
   325  <ul class="simple">
   326  <li>coders/xpm.c (ReadXPMImage): Image properties are expected to
   327  appear within the first 512 bytes of the XPM file header.  fixes
   328  oss-fuzz 18267 &quot;graphicsmagick:coder_PICON_fuzzer: Timeout in
   329  coder_PICON_fuzzer&quot;.</li>
   330  </ul>
   331  </blockquote>
   332  <p>2019-10-14  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   333  <blockquote>
   334  <ul class="simple">
   335  <li>configure.ac: Fix tcmalloc configuration report.</li>
   336  </ul>
   337  </blockquote>
   338  <p>2019-10-13  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   339  <blockquote>
   340  <ul class="simple">
   341  <li>coders/wpg.c (ReadWPGImage): Implement subimage/subrange
   342  support.</li>
   343  <li>coders/mat.c (ReadMATImage, ReadMATImageV4): Implement
   344  subimage/subrange support.  Should resolve oss-fuzz 14999
   345  &quot;graphicsmagick/coder_MAT_fuzzer: Out-of-memory in
   346  graphicsmagick_coder_MAT_fuzzer&quot;.</li>
   347  <li>coders/tiff.c (TIFFMapBlob): Fix compile problem if
   348  LOG_TIFF_BLOB_IO is defined.</li>
   349  <li>coders/wpg.c (ExtractPostscript): Improve performance.  Avoid
   350  temporary files if possible.  Avoid additional memory allocations
   351  if possible.  Should address oss-fuzz issue 18173
   352  &quot;graphicsmagick:enhance_fuzzer: Timeout in enhance_fuzzer&quot; and
   353  oss-fuzz issue 17714 &quot;graphicsmagick:coder_WPG_fuzzer: Timeout in
   354  coder_WPG_fuzzer&quot;.</li>
   355  </ul>
   356  </blockquote>
   357  <p>2019-10-12  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   358  <blockquote>
   359  <ul class="simple">
   360  <li>coders/pnm.c (PNMInteger): Place a generous arbitrary limit on
   361  the amount of PNM comment text to avoid denial of service
   362  opportunity.  Fixes oss-fuzz 18162 &quot;Timeout · coder_PNM_fuzzer&quot;.</li>
   363  </ul>
   364  </blockquote>
   365  <p>2019-10-08  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   366  <blockquote>
   367  <ul class="simple">
   368  <li>coders/dps.c (ReadDPSImage): Fix memory leak when OpenBlob()
   369  reports failure.  Same as ImageMagick CVE CVE-2019-16709.</li>
   370  </ul>
   371  </blockquote>
   372  <p>2019-09-27  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   373  <blockquote>
   374  <ul class="simple">
   375  <li>magick/attribute.c (GenerateEXIFAttribute): Skip
   376  unsupported/invalid format 0.  Fixes oss-fuzz issue 17597
   377  &quot;graphicsmagick:coder_SFW_fuzzer: Heap-buffer-overflow in
   378  GenerateEXIFAttribute&quot;.</li>
   379  </ul>
   380  </blockquote>
   381  <p>2019-09-19  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   382  <blockquote>
   383  <ul class="simple">
   384  <li>fuzzing/oss-fuzz-build.sh: Change by Alex Gaynor so that the
   385  correct oss-fuzz fuzzing engine should be used.</li>
   386  </ul>
   387  </blockquote>
   388  <p>2019-09-18  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   389  <blockquote>
   390  <ul class="simple">
   391  <li>magick/static.c (OpenModule): Static module loader should use
   392  upper-cased magick string when searching for a module alias.
   393  Fixes SourceForge issue #613 &quot;static module loader is still
   394  case-sensitive&quot;.</li>
   395  </ul>
   396  </blockquote>
   397  <p>2019-09-16  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   398  <blockquote>
   399  <ul class="simple">
   400  <li>configure.ac: Report status of zstd (FaceBook Zstandard)
   401  compression in configuration summary.</li>
   402  </ul>
   403  </blockquote>
   404  <p>2019-09-15  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   405  <blockquote>
   406  <ul class="simple">
   407  <li>magick/render.c (TraceArcPath): Substitute a lineto command when
   408  tracing arc is impossible.  Fixes oss-fuzz 10765
   409  &quot;graphicsmagick/coder_MVG_fuzzer: Divide-by-zero in TraceArcPath&quot;.</li>
   410  </ul>
   411  </blockquote>
   412  <p>2019-09-14  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   413  <blockquote>
   414  <ul class="simple">
   415  <li>coders/png.c (png_read_raw_profile): Fix validation of raw
   416  profile length.  Fixes oss-fuzz 16906
   417  &quot;graphicsmagick:coder_ICO_fuzzer: Out-of-memory in
   418  graphicsmagick_coder_ICO_fuzzer&quot;.</li>
   419  <li>coders/wpg.c (ReallocColormap): Avoid dereferencing a null
   420  pointer if image-&gt;colormap is null.  Fixes oss-fuzz 17004
   421  &quot;graphicsmagick:coder_WPG_fuzzer: Null-dereference READ in
   422  ReallocColormap&quot;.</li>
   423  </ul>
   424  </blockquote>
   425  <p>2019-09-13  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   426  <blockquote>
   427  <ul class="simple">
   428  <li>magick/memory.c (MagickRealloc): Add a note that the behavior of
   429  this function is as described for BSD reallocf(3), which is now
   430  appearing in Linux's GNU libc and elsewhere.</li>
   431  </ul>
   432  </blockquote>
   433  <p>2019-09-09  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   434  <blockquote>
   435  <ul class="simple">
   436  <li>www/OpenMP.rst: Document the significant OpenMP speed-up which
   437  may be obtained by using an alternate memory allocation library.
   438  Currently 'tcmalloc', 'mtmalloc', and 'umem' are supported as
   439  options.</li>
   440  <li>www/INSTALL-unix.rst: Document new --with-tcmalloc option to
   441  enable using Google gperftools tcmalloc library.</li>
   442  <li>configure.ac: Add support for using Google gperftools tcmalloc
   443  library via the --with-tcmalloc option.</li>
   444  <li>scripts/rst2htmldeco.py: Port to Python 3 syntax and require at
   445  least Python 2.6.</li>
   446  <li>scripts/relpath.py: Port to Python 3 syntax and require
   447  at least Python 2.6.</li>
   448  <li>scripts/html_fragments.py: Port to Python 3 syntax and require
   449  at least Python 2.6.</li>
   450  <li>scripts/format_c_api_doc.py: Port to Python 3 syntax and require
   451  at least Python 2.6.</li>
   452  </ul>
   453  </blockquote>
   454  <p>2019-08-27  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   455  <blockquote>
   456  <ul class="simple">
   457  <li>doc/GraphicsMagick.imdoc: Document gm utility exit status codes.</li>
   458  </ul>
   459  </blockquote>
   460  <p>2019-08-25  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   461  <blockquote>
   462  <ul class="simple">
   463  <li>magick/render.c (PRIMITIVE_INFO_POINTS_MAX): SIZE_MAX apparently
   464  rounds up by one when cast to a double on 64-bit systems.  Due to
   465  this, and in order to set more rational implementation limits, add
   466  a PRIMITIVE_INFO_POINTS_MAX definition which computes and
   467  constrains the maximum number of PrimitiveInfo entries allowed.</li>
   468  </ul>
   469  </blockquote>
   470  <p>2019-08-24  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   471  <blockquote>
   472  <ul class="simple">
   473  <li>magick/attribute.c (GenerateEXIFAttribute): Check that we are
   474  not being directed to read an IFD that we are already parsing and
   475  quit in order to avoid a loop.  Addresses oss-fuzz 15753
   476  &quot;graphicsmagick/coder_JPEG_fuzzer: Timeout in
   477  graphicsmagick_coder_JPEG_fuzzer&quot; and 16068
   478  &quot;graphicsmagick/coder_SFW_fuzzer: Timeout in
   479  graphicsmagick_coder_SFW_fuzzer&quot;.</li>
   480  <li>tests/{constitute.c, drawtest.c, rwblob.c, rwfile.c}: Eliminate
   481  irritating GCC 9 &quot;__builtin_strncpy' output may be truncated&quot;
   482  warnings due to copying MaxTextExtent-1 characters.  Instead
   483  request copying all of the characters and also assure that string
   484  is still null terminated.</li>
   485  <li>doc/environment.imdoc: Update documentation pertaining to HOME
   486  and MAGICK_DEBUG environment variables.</li>
   487  </ul>
   488  </blockquote>
   489  <p>2019-08-23  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   490  <blockquote>
   491  <ul class="simple">
   492  <li>magick/log.c (DestroyLogInfo): Only output text to terminate an
   493  XML format log file if XML format is active.</li>
   494  </ul>
   495  </blockquote>
   496  <p>2019-08-22  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   497  <blockquote>
   498  <ul class="simple">
   499  <li>magick/render.c (ExtractTokensBetweenPushPop): Previous fix for
   500  non-terminal loop was broken by a last-minute untested edit.
   501  Finally addresses oss-fuzz 15318 &quot;graphicsmagick/coder_MVG_fuzzer:
   502  Timeout in graphicsmagick_coder_MVG_fuzzer&quot;.</li>
   503  </ul>
   504  </blockquote>
   505  <p>2019-08-17  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   506  <blockquote>
   507  <ul class="simple">
   508  <li>fuzzing/utils.cc (MemoryResource): Lessen the memory limit used
   509  for oss-fuzz testing in order to provide more headroom and margin
   510  for error.</li>
   511  <li>magick/render.c (TraceBezier): Detect arithmetic overflow and
   512  return errors via normal error path rather than exiting.  Fixes
   513  oss-fuzz 16450 &quot;graphicsmagick:coder_MVG_fuzzer: Unexpected-exit
   514  in DefaultFatalErrorHandler&quot;.
   515  (PrimitiveInfoRealloc): Implement more paranoid code related to
   516  primitive allocation.</li>
   517  </ul>
   518  </blockquote>
   519  <p>2019-08-16  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   520  <blockquote>
   521  <ul class="simple">
   522  <li>magick/render.c (DrawStrokePolygon): Handle case where
   523  TraceStrokePolygon() returns NULL.  Addresses oss-fuzz 15516
   524  &quot;graphicsmagick/coder_MVG_fuzzer: ASSERT: primitive_info !=
   525  (PrimitiveInfo *) NULL&quot;.
   526  (DrawDashPolygon): Handle case where DrawStrokePolygon() returns
   527  MagickFail. Also needed to address oss-fuzz 15516, since otherwise
   528  test-cases run for a very long time.
   529  (ExtractTokensBetweenPushPop): Fix non-terminal parsing loop.
   530  Addresses oss-fuzz 15318 &quot;graphicsmagick/coder_MVG_fuzzer: Timeout
   531  in graphicsmagick_coder_MVG_fuzzer&quot;.</li>
   532  </ul>
   533  </blockquote>
   534  <p>2019-08-15  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   535  <blockquote>
   536  <ul class="simple">
   537  <li>magick/memory.h (MagickMallocAlignedArray): Add function
   538  attributes for added value and to quench GCC 9 warning with
   539  special build options enabled.</li>
   540  <li>magick/deprecate.h (AcquireMemory): Add more function attributes
   541  to quench GCC 9 warning with special build options enabled.</li>
   542  <li>magick/attribute.c (GenerateEXIFAttribute): Fix compilation
   543  warning in 32-bit build.</li>
   544  <li>coders/dpx.c (AttributeToString): Eliminate annoying warnings
   545  from GCC 9, although the code was correct.</li>
   546  <li>coders/msl.c (MSLStartElement): Fix defective opacity percentage
   547  code revealed by GCC 9 warning.</li>
   548  </ul>
   549  </blockquote>
   550  <p>2019-08-14  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   551  <blockquote>
   552  <ul class="simple">
   553  <li>coders/png.c (ReadMNGImage): Skip coalescing layers if there is
   554  only one layer.  Fixes oss-fuzz 16274
   555  &quot;graphicsmagick/coder_MNG_fuzzer: Unexpected-exit in
   556  DefaultFatalErrorHandler&quot;.</li>
   557  </ul>
   558  </blockquote>
   559  <p>2019-08-12  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   560  <blockquote>
   561  <ul class="simple">
   562  <li>coders/png.c (ReadPNGImage): Post-processing to convert the
   563  image type in the PNG reader based on a specified magick prefix
   564  string is now disabled.  This can (and should) be done after the
   565  image has been returned.  Fixes oss-fuzz 16386
   566  &quot;graphicsmagick:coder_PNG8_fuzzer: Timeout in
   567  graphicsmagick_coder_PNG8_fuzzer&quot;.</li>
   568  </ul>
   569  </blockquote>
   570  <p>2019-07-20  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   571  <blockquote>
   572  <ul class="simple">
   573  <li>NEWS.txt: Updates in preparation for 1.3.33 release.</li>
   574  </ul>
   575  </blockquote>
   576  <p>2019-07-19  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   577  <blockquote>
   578  <ul class="simple">
   579  <li>NEWS.txt: Updated NEWS to reflect updates since last release.</li>
   580  </ul>
   581  </blockquote>
   582  <p>2019-07-12  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   583  <blockquote>
   584  <ul class="simple">
   585  <li>coders/png.c (WriteOnePNGImage): Fix saving to palette when
   586  image has an alpha channel but no color is marked as transparent.
   587  Patch submitted by Przemysław Sobala via SourceForge patch #61
   588  &quot;WriteOnePNGImage(): Fix saving to palette when image has an alpha
   589  channel but no color is marked as transparent&quot;.</li>
   590  <li>doc/options.imdoc (characters): Fix -format documentation to
   591  reflect that '%r' returns the image type.  Patch submitted by
   592  Przemysław Sobala via SourceForge patch #60 &quot;Fix documentation
   593  typo&quot;.</li>
   594  </ul>
   595  </blockquote>
   596  <p>2019-07-07  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   597  <blockquote>
   598  <ul class="simple">
   599  <li>magick/tempfile.c (AcquireTemporaryFileDescriptor): Fix
   600  compilation under Cygwin.  Patch by Marco Atzeri and submitted via
   601  email to the graphicsmagick-help mailing list on Fri, 5 Jul 2019.</li>
   602  </ul>
   603  </blockquote>
   604  <p>2019-06-23  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   605  <blockquote>
   606  <ul class="simple">
   607  <li>magick/attribute.c (GenerateEXIFAttribute): Added range checks
   608  and tracing.  Fixes oss-fuzz 14998
   609  &quot;graphicsmagick/coder_JPEG_fuzzer: Heap-buffer-overflow in
   610  Read32s&quot;.  This is a tiny read overflow.</li>
   611  <li>coders/miff.c (ReadMIFFImage): Similar fix as to mpc.c</li>
   612  <li>coders/mpc.c (ReadMPCImage): Fix faulty signed overflow logic
   613  for profiles[i].length which still allowed overflow.  Fixes
   614  oss-fuzz issue 15190 &quot;graphicsmagick/coder_MPC_fuzzer:
   615  Out-of-memory in graphicsmagick_coder_MPC_fuzzer&quot;.</li>
   616  <li>doc/options.imdoc: Add notes about security hazards due to
   617  commands which support a <a class="reference external" href="mailto:'&#37;&#52;&#48;filename">'<span>&#64;</span>filename</a>' syntax.</li>
   618  <li>www/security.rst: Add notes about security hazards due to
   619  commands which support a <a class="reference external" href="mailto:'&#37;&#52;&#48;filename">'<span>&#64;</span>filename</a>' syntax.</li>
   620  </ul>
   621  </blockquote>
   622  <p>2019-06-22  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   623  <blockquote>
   624  <ul class="simple">
   625  <li>magick/render.c (DrawImage): Assure that 'token' is initialized.
   626  Fixes oss-fuzz issue 14897 &quot;graphicsmagick/coder_MVG_fuzzer:
   627  Use-of-uninitialized-value in DrawImage&quot;.</li>
   628  <li>magick/animate.c (MagickXAnimateImages): Fix memory leak of
   629  scene_info.pixels.</li>
   630  <li>magick/display.c (MagickXDisplayImage): Fix heap overwrite of
   631  windows-&gt;image.name and windows-&gt;image.icon_name buffers.  It
   632  appears that the code assumed that CloneString() would always
   633  allocated a string at least MaxTextExtent in size. I assume that
   634  this issue has existed for a very long time since CloneString()
   635  was re-written many years ago.</li>
   636  <li>coders/caption.c (ReadCAPTIONImage): The CAPTION reader did not
   637  appear to work at all any more.  Now it works again, but still not
   638  very well.</li>
   639  <li>magick/command.c: Re-implement '&#64;' file inclusion support for
   640  -comment, -draw, -format, and -label which was removed for the
   641  1.3.32 release.  Note that arguments from untrusted sources will
   642  still need to be sanitized to detect attempts to subvert this
   643  feature to access file data, but this feature has always been
   644  supported by GraphicsMagick and it originated early in the
   645  development of ImageMagick.</li>
   646  </ul>
   647  </blockquote>
   648  <p>2019-06-17  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   649  <blockquote>
   650  <ul class="simple">
   651  <li>magick/utility.c (MagickStrlCat, MagickStrlCpy): Add debug
   652  checks enabled by MAGICK_STRL_CHECK.</li>
   653  <li>magick/montage.c (MontageImages): Fix wrong length argument to
   654  strlcat() when building montage directory, which could allow heap
   655  overwrite.</li>
   656  <li>coders/png.c (RegisterPNGImage): Pass correct size value to
   657  strlcat().  Under Apple's OS X (and possibly other targets)
   658  strlcat() writes bytes beyond what it needs to (but within the
   659  range it is allowed to) causing a crash due to the wrong limit
   660  value.  Fixes SourceForge issue #609 <cite>gm identify foo.png</cite> crashes
   661  on macOS (v 1.3.32).</li>
   662  <li>www/Changes.rst: Update ChangeLog links due to new year, and
   663  1.3.32 release.</li>
   664  </ul>
   665  </blockquote>
   666  <p>2019-06-16  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   667  <blockquote>
   668  <ul class="simple">
   669  <li>coders/bmp.c (WriteBMPImage): Detect arithmetic overflow of
   670  image_size. Add more tracing. Reduce compilation warnings.
   671  (EncodeImage): Reduce compilation warnings.
   672  (WriteBMPImage): Assure that chromaticity uses double-precision
   673  for multiply before casting to unsigned integer.</li>
   674  <li>coders/wpg.c (ReallocColormap): Reduce compilation warnings.</li>
   675  <li>coders/braille.c (WriteBRAILLEImage): Reduce compilation
   676  warnings.</li>
   677  <li>coders/dib.c (WriteDIBImage): Detect arithmetic overflow of
   678  image_size. Reduce compilation warnings.
   679  (EncodeImage): Reduce compilation warnings.</li>
   680  <li>coders/locale.c (WriteLOCALEImage): Reduce compilation warnings.</li>
   681  </ul>
   682  </blockquote>
   683  <p>2019-06-15  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   684  <blockquote>
   685  <ul class="simple">
   686  <li>Makefile.am (dist-zstd): Use the maximum possible compression
   687  level (22) when creating a Zstd-compressed tarball to get close to
   688  lzip/xz compression levels.</li>
   689  <li>coders/tiff.c (ReadTIFFImage): Fix typo in initialization of
   690  'tile' pointer variable.</li>
   691  <li>version.sh: Updates in preparation for 1.3.32 release.</li>
   692  </ul>
   693  </blockquote>
   694  <p>2019-06-14  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   695  <blockquote>
   696  <ul class="simple">
   697  <li>Makefile.am (release): Add a release target to make it easier to
   698  produce and sign the release files.  Add a zstd-compressed output
   699  tarball just because we can.</li>
   700  </ul>
   701  </blockquote>
   702  <p>2019-06-12  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   703  <blockquote>
   704  <ul class="simple">
   705  <li>magick/render.c (DrawImage): Fix typo when initializing
   706  number_coordinates.  Somehow GCC and clang let this typo slip by.</li>
   707  </ul>
   708  </blockquote>
   709  <p>2019-06-11  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   710  <blockquote>
   711  <ul class="simple">
   712  <li>coders/dib.c (ReadDIBImage): Preserve PseudoClass opaque
   713  representation if ICO mask is opaque, otherwise return a
   714  DirectClass image.</li>
   715  </ul>
   716  </blockquote>
   717  <p>2019-06-10  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   718  <blockquote>
   719  <ul class="simple">
   720  <li>magick/render.c (DrawImage): Detect an error in TracePath() and
   721  quit rather than forging on.</li>
   722  </ul>
   723  </blockquote>
   724  <p>2019-06-09  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   725  <blockquote>
   726  <ul class="simple">
   727  <li>magick/render.c (DrawImage): Terminate drawing if
   728  DrawCompositeMask() reports failure.  Fixes oss-fuzz 12373
   729  &quot;graphicsmagick/coder_MVG_fuzzer: Timeout in
   730  graphicsmagick_coder_MVG_fuzzer&quot;.
   731  (TracePath): Terminate path parsing upon first parsing error.</li>
   732  </ul>
   733  </blockquote>
   734  <p>2019-06-08  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   735  <blockquote>
   736  <ul class="simple">
   737  <li>coders/txt.c (ReadTXTImage): Use real a new-line character as
   738  line delimiter rather than 'n' string.</li>
   739  <li>magick/annotate.c (AnnotateImage): No longer implicitly call
   740  TranslateText() since this is not suitable for most use-cases and
   741  causes additional performance impact.  The API user can perform
   742  such translations in advance on the text string using
   743  TranslateText() if need be.  No longer call StringToList() to
   744  split strings into an array of strings since this can lead to
   745  unexpected results, and a custom-splitter is more efficient.</li>
   746  </ul>
   747  </blockquote>
   748  <p>2019-06-06  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   749  <blockquote>
   750  <ul class="simple">
   751  <li>magick/render.c (DrawImage): Only support <a class="reference external" href="mailto:'&#37;&#52;&#48;filename">'<span>&#64;</span>filename</a>' syntax to
   752  read drawing primitive from a file if we are not already drawing.</li>
   753  <li>magick/utility.c (TranslateTextEx): Remove support for reading
   754  from a file using <a class="reference external" href="mailto:'&#37;&#52;&#48;filename">'<span>&#64;</span>filename</a>' syntax due to security concerns.
   755  Problem was reported to us by &quot;Battle Furry&quot; via the
   756  GraphicsMagick security mail alias on June 6, 2019.</li>
   757  </ul>
   758  </blockquote>
   759  <p>2019-06-03  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   760  <blockquote>
   761  <ul class="simple">
   762  <li>magick/utility.c (SetClientFilename): Reduce initialized data
   763  some more.</li>
   764  </ul>
   765  </blockquote>
   766  <p>2019-06-02  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   767  <blockquote>
   768  <ul class="simple">
   769  <li>magick/nt_base.c: Search for n019003l.pfb (the &quot;Helvetica&quot;-like
   770  font) rather than fonts.dir since fonts.dir is not present in all
   771  URW font collections.</li>
   772  <li>NEWS.txt: Update news.</li>
   773  </ul>
   774  </blockquote>
   775  <p>2019-06-01  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   776  <blockquote>
   777  <ul class="simple">
   778  <li>coders/logo.c: Tidy logo image definitions, and logo image
   779  output.</li>
   780  </ul>
   781  </blockquote>
   782  <p>2019-05-23  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   783  <blockquote>
   784  <ul class="simple">
   785  <li>coders/mat.c: Make more data const.</li>
   786  </ul>
   787  </blockquote>
   788  <p>2019-05-22  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   789  <blockquote>
   790  <ul class="simple">
   791  <li>magick/animate.c: Reduce initialized static allocations.</li>
   792  <li>magick/display.c: Reduce initialized static allocations.</li>
   793  <li>magick/widget.c (MagickSplitNDLTextToList): Add static
   794  implementation function.</li>
   795  </ul>
   796  </blockquote>
   797  <p>2019-05-20  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   798  <blockquote>
   799  <ul class="simple">
   800  <li>coders/webp.c (RegisterWEBPImage): Use sprintf to format version
   801  since snprintf is not available in old Visual Studio.</li>
   802  </ul>
   803  </blockquote>
   804  <p>2019-05-19  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   805  <blockquote>
   806  <ul class="simple">
   807  <li>coders/dcm.c: Make more data const.</li>
   808  <li>www/INSTALL-unix.rst: Add documentation for how to install URW
   809  fonts from various package management systems.</li>
   810  </ul>
   811  </blockquote>
   812  <p>2019-05-18  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   813  <blockquote>
   814  <ul class="simple">
   815  <li>www/authors.rst: Add authorship attribution to Samuel Thibault
   816  for contributing support for the Braille image format.</li>
   817  <li>coders/braille.c: Add support for Braille image format by Samuel
   818  Thibault.  Patch submitted via SourceForge patch #59 &quot;Add braille
   819  image format support.</li>
   820  </ul>
   821  </blockquote>
   822  <p>2019-05-17  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   823  <blockquote>
   824  <ul class="simple">
   825  <li>magick/tempfile.c: Make more data const.</li>
   826  <li>magick/signature.c: Make more data const.</li>
   827  <li>magick/quantize.c: Make more data const.</li>
   828  <li>magick/attribute.c: Make more data const.</li>
   829  <li>coders/png.c: Make more data const.</li>
   830  <li>coders/mpeg.c: Make more data const.</li>
   831  <li>coders/wmf.c: Make more data const.</li>
   832  <li>coders/tile.c: Make more data const.</li>
   833  </ul>
   834  </blockquote>
   835  <p>2019-05-16  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   836  <blockquote>
   837  <ul class="simple">
   838  <li>magick/enum_strings.c: Make more data const.</li>
   839  </ul>
   840  </blockquote>
   841  <p>2019-05-15  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   842  <blockquote>
   843  <ul class="simple">
   844  <li>magick/magick.c: Make more data const.</li>
   845  <li>magick/type.c (GetTypeInfoByFamily): Make more data const.</li>
   846  <li>magick/unix_port.c (MagickGetMMUPageSize): Decrease initialized
   847  data.</li>
   848  <li>magick/utility.c (GetPageGeometry): Make more data const.</li>
   849  <li>coders/pdf.c (WritePDFImage): Allocate working buffer on stack
   850  and pass as argument to EscapeParenthesis() to eliminate a thread
   851  safety problem and also reduce BSS size.</li>
   852  <li>coders/webp.c (RegisterWEBPImage): Fix compiler warning.</li>
   853  <li>coders/jbig.c (RegisterJBIGImage): Make more data const.</li>
   854  <li>coders/pict.c (DecodeImage): Allocate output buffer used by
   855  ExpandBuffer() on the stack rather than as static data private to
   856  ExpandBuffer().  Eliminates a thread safety problem and also
   857  reduces BSS size.</li>
   858  <li>coders/webp.c (RegisterWEBPImage): Reduce BSS size.</li>
   859  </ul>
   860  </blockquote>
   861  <p>2019-05-14  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   862  <blockquote>
   863  <ul class="simple">
   864  <li>coders/jp2.c: Make more data const.</li>
   865  <li>coders/wmf.c: Make more data const.</li>
   866  <li>coders/ps.c (WritePSImage): Make more data const.</li>
   867  <li>coders/ps2.c (WritePS2Image): Make more data const.</li>
   868  </ul>
   869  </blockquote>
   870  <p>2019-05-13  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   871  <blockquote>
   872  <ul class="simple">
   873  <li>magick/static.c: Revert to previous 'name' storage. Callback
   874  functions in structure block being properly const.</li>
   875  <li>coders/xpm.c: Make more data const.</li>
   876  <li>coders/pnm.c: Make more data const.</li>
   877  <li>coders/palm.c: Make more data const.</li>
   878  <li>coders/meta.c: Make more data const.</li>
   879  <li>coders/dcraw.c: Make more data const.</li>
   880  <li>magick/command.c: Fix compilation problem when HasX11 is not
   881  defined.</li>
   882  </ul>
   883  </blockquote>
   884  <p>2019-05-12  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   885  <blockquote>
   886  <ul class="simple">
   887  <li>magick/command.c: Make more data const.</li>
   888  </ul>
   889  </blockquote>
   890  <p>2019-05-11  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   891  <blockquote>
   892  <ul class="simple">
   893  <li>coders/webp.c (RegisterWEBPImage): Make more data const.</li>
   894  <li>coders/svg.c (RegisterSVGImage): Reduce BSS size.</li>
   895  <li>coders/miff.c (RegisterMIFFImage): Fix version reporting.</li>
   896  <li>coders/ttf.c (RegisterTTFImage): Fixed reporting of FreeType
   897  version.</li>
   898  <li>coders/tiff.c (RegisterTIFFImage): Reduce BSS size.</li>
   899  <li>coders/sfw.c (ReadSFWImage): Make SFW static data completely
   900  const.</li>
   901  <li>coders/ps3.c: Make PS3 static data completely const.</li>
   902  <li>coders/pict.c: Make PICT static data completely const.</li>
   903  <li>magick/error.c (ThrowException, ThrowLoggedException): Handle
   904  the case where some passed character strings refer to existing
   905  exception character strings.  Fixes SourceForge issue #603
   906  &quot;heap-use-after-free in function ThrowLoggedException of
   907  magick/error.c&quot;.
   908  (CatchException): Restructure so there is one return point.</li>
   909  <li>coders/miff.c (ImportRLEPixels): Fix heap overflow caused by a
   910  typo in the code.  Also fix undefined behavior caused by large
   911  left shifts of an unsigned char.  Fixes SourceForge issue #608
   912  &quot;heap-buffer-overflow in ImportRLEPixels of coders/miff.c.</li>
   913  </ul>
   914  </blockquote>
   915  <p>2019-05-08  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   916  <blockquote>
   917  <ul class="simple">
   918  <li>coders/bmp.c (ReadBMPImage): Fix subrange/scene handling in
   919  'ping' mode so it is like the other formats.  Only the first frame
   920  was being enumerated while in 'ping' mode.</li>
   921  </ul>
   922  </blockquote>
   923  <p>2019-05-07  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   924  <blockquote>
   925  <ul class="simple">
   926  <li>NEWS.txt: Update news.</li>
   927  <li>magick/utility.c (ExpandFilenames): Only expand <a class="reference external" href="mailto:'&#37;&#52;&#48;filename">'<span>&#64;</span>filename</a>' to a
   928  list of arguments read from 'filename' if the path <a class="reference external" href="mailto:'&#37;&#52;&#48;filename">'<span>&#64;</span>filename</a>'
   929  does not exist.  This fix is made based on an email posting to the
   930  'graphicsmagick-help' mailing list at SourceForge by &quot;Test User&quot;
   931  on Tue, 7 May 2019.</li>
   932  </ul>
   933  </blockquote>
   934  <p>2019-05-05  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   935  <blockquote>
   936  <ul class="simple">
   937  <li>magick/colorspace.c: Reorder initialization of colorspace tables
   938  for a possible performance improvement.</li>
   939  <li>magick/fx.c (WaveImage): Use float for sin map.</li>
   940  <li>configure.ac: Test for float versions of math functions.</li>
   941  <li>magick/gem.c (GenerateDifferentialNoise): Use float versions of
   942  math functions when available.</li>
   943  </ul>
   944  </blockquote>
   945  <p>2019-05-02  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   946  <blockquote>
   947  <ul class="simple">
   948  <li>www/INSTALL-unix.rst: Expanded configure documentation for
   949  --with-modules.  Added specific configure documentation for
   950  --with-umem and --with-mtmalloc, which may be useful on
   951  Solaris-derived systems.</li>
   952  </ul>
   953  </blockquote>
   954  <p>2019-04-23  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   955  <blockquote>
   956  <ul class="simple">
   957  <li>magick/command.c (VersionCommand): Show OpenMP specification
   958  version corresponding to version enumeration.</li>
   959  <li>magick/locale.c (GetLocaleMessageFromTag): Eliminate clang
   960  warning about comparison with a constant value.</li>
   961  <li>magick/log.c (InitializeLogInfo): Initialize LogInfo log_configured.</li>
   962  </ul>
   963  </blockquote>
   964  <p>2019-04-21  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   965  <blockquote>
   966  <ul class="simple">
   967  <li>magick/magic.c (struct): Ajust StaticMagic definition to be more
   968  const-friendly.</li>
   969  <li>magick/color_lookup.c (struct): Adjust StaticColors definition
   970  to be more const-friendly.</li>
   971  <li>magick/attribute.c: Ajust tag_table definition to be more
   972  const-friendly.</li>
   973  <li>magick/log.c: Allocate LogInfo from heap as we used to do.</li>
   974  <li>magick/locale.c (GetLocaleMessageFromTag): Adaptations to locale
   975  coder output changes.</li>
   976  <li>coders/locale.c (WriteLOCALEImage): Adjust locale coder output
   977  to be more const.</li>
   978  </ul>
   979  </blockquote>
   980  <p>2019-04-20  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   981  <blockquote>
   982  <ul class="simple">
   983  <li>magick/color_lookup.c: Make built-in color tables fully const.</li>
   984  <li>magick/animate.c: Use MagickXTextViewWidgetNDL() to display help
   985  text.</li>
   986  <li>magick/display.c: Use MagickXTextViewWidgetNDL() to display help
   987  text.</li>
   988  <li>magick/widget.c (MagickXTextViewWidgetNDL): New private function
   989  to display multi-line null-delimited text in an X11 widget.</li>
   990  <li>coders/xwd.c (ReadXWDImage): Added even more XWD header
   991  validation logic.  Addresses problems noted by email from Hongxu
   992  Chen to the graphicsmagick-security mail alias on Fri, 19 Apr 2019
   993  and Sat, 20 Apr 2019 and entitled &quot;Multiple crashes (FPE and
   994  invalid read) when processing XWD files&quot;.</li>
   995  </ul>
   996  </blockquote>
   997  <p>2019-04-17  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
   998  <blockquote>
   999  <ul class="simple">
  1000  <li>coders/xwd.c (ReadXWDImage): Added even more XWD header
  1001  validation logic.  Addresses problems noted by email from Hongxu
  1002  Chen to the graphicsmagick-security mail alias on Wed, 17 Apr 2019
  1003  and entitled &quot;Multiple crashes (FPE and invalid read) when
  1004  processing XWD files&quot;.  Also addresses additional issues noted
  1005  that an attacker could request to allocate an arbitrary amount of
  1006  memory based on ncolors and the claimed header size.</li>
  1007  </ul>
  1008  </blockquote>
  1009  <p>2019-04-14  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1010  <blockquote>
  1011  <ul class="simple">
  1012  <li>coders/xwd.c (ReadXWDImage): Add more XWD header validation
  1013  logic.  Addresses problems noted by email from Hongxu Chen to the
  1014  graphicsmagick-security mail alias on Sun, 14 Apr 2019 and
  1015  entitled &quot;Multiple crashes (FPE and invalid read) when processing
  1016  XWD files&quot;.</li>
  1017  </ul>
  1018  </blockquote>
  1019  <p>2019-04-13  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1020  <blockquote>
  1021  <ul class="simple">
  1022  <li>coders/pdb.c (WritePDBImage): Assure that input scanline is
  1023  cleared in order to cover up some decoder bug.  May fix 14215
  1024  &quot;graphicsmagick/coder_PDB_fuzzer: Use-of-uninitialized-value in
  1025  WritePDBImage&quot;, which I have not been able to reproduce.</li>
  1026  <li>magick/render.c (DrawPrimitive): Check primitive point x/y
  1027  values for NaN.
  1028  (DrawImage): Fix oss-fuzz issue 14173
  1029  &quot;graphicsmagick/coder_MVG_fuzzer: Integer-overflow in DrawImage&quot;.</li>
  1030  <li>magick/pixel_cache.c (SetNexus): Fix oss-fuzz issue 14208
  1031  &quot;graphicsmagick/coder_MVG_fuzzer: Integer-overflow in SetNexus&quot;.</li>
  1032  </ul>
  1033  </blockquote>
  1034  <p>2019-04-11  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1035  <blockquote>
  1036  <ul class="simple">
  1037  <li>magick/display.c: Add even more const declarations.</li>
  1038  <li>coders/mat.c (WriteMATLABImage): Add completely missing error
  1039  handling.  Fixes SourceForge issue #604 &quot;heap-buffer-overflow in
  1040  function WriteMATLABImage of coders/mat.c&quot;.</li>
  1041  </ul>
  1042  </blockquote>
  1043  <p>2019-04-10  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1044  <blockquote>
  1045  <ul class="simple">
  1046  <li>coders/pdb.c (WritePDBImage): Fix SourceForge issue #605
  1047  &quot;heap-buffer-overflow in function WritePDBImage of coders/pdb.c&quot;.</li>
  1048  <li>magick/widget.c: Add many const declarations.</li>
  1049  <li>magick/display.c: Incorporate and eliminate display.h. Add many
  1050  const declarations.</li>
  1051  <li>magick/animate.c: Incorporate and eliminate animate.h. Add many
  1052  const declarations.</li>
  1053  </ul>
  1054  </blockquote>
  1055  <p>2019-04-08  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1056  <blockquote>
  1057  <ul class="simple">
  1058  <li>coders/wmf.c (ReadWMFImage): Reject WMF files with an empty
  1059  bounding box.  Fixes SourceForge issue #606 &quot;Division by Zero in
  1060  coders/wmf.c&quot;.</li>
  1061  </ul>
  1062  </blockquote>
  1063  <p>2019-04-07  Fojtik Jaroslav  &lt;<a class="reference external" href="mailto:JaFojtik&#37;&#52;&#48;seznam&#46;cz">JaFojtik<span>&#64;</span>seznam<span>&#46;</span>cz</a>&gt;</p>
  1064  <blockquote>
  1065  <ul class="simple">
  1066  <li>magick/nt_base.c Fix a problem of finding ghostscript fonts.
  1067  Variable &quot;font_dir&quot; was useless and thus removed. No need to copy
  1068  text multiple times.  Use const char gs_font_dir[] instead of
  1069  pointer.</li>
  1070  </ul>
  1071  </blockquote>
  1072  <p>2019-04-07  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1073  <blockquote>
  1074  <ul class="simple">
  1075  <li>coders/xwd.c (ReadXWDImage): Perform more header validations and
  1076  a file size validation in order to reject files with bogus
  1077  headers.
  1078  (WriteXWDImage): Fix SourceForge issue #599
  1079  &quot;heap_buffer_overflow_WRITE in function WriteXWDImage of
  1080  coders/xwd.c&quot;.</li>
  1081  </ul>
  1082  </blockquote>
  1083  <p>2019-04-05  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1084  <blockquote>
  1085  <ul class="simple">
  1086  <li>coders/svg.c (SVGStartElement): Fix stack buffer overflow while
  1087  parsing quoted font family value.  Fixes SourceForge issue #600
  1088  &quot;stack-buffer-overflow in function SVGStartElement of
  1089  coders/svg.c&quot;.</li>
  1090  <li>coders/miff.c (ReadMIFFImage): Detect end of file while reading
  1091  RLE packets.  Fixes SourceForge issue #598 &quot;heap-buffer-overflow
  1092  in function ReadMIFFImage of coders/miff.c&quot;.</li>
  1093  </ul>
  1094  </blockquote>
  1095  <p>2019-04-03  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1096  <blockquote>
  1097  <ul class="simple">
  1098  <li>coders/xwd.c (ReadXWDImage): Fix heap buffer overflow while
  1099  reading DirectClass XWD file.  Fixes SourceForge issue #597
  1100  &quot;heap-buffer-overflow in function ReadXWDImage of coders/xwd.c&quot;.</li>
  1101  </ul>
  1102  </blockquote>
  1103  <p>2019-04-02  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1104  <blockquote>
  1105  <ul class="simple">
  1106  <li>coders/png.c (ReadMNGImage): Fix small buffer overflow (one
  1107  PixelPacket) of image colormap.  Fixes SourceForge issue #596
  1108  &quot;heap-buffer-overflow in function CloneImage of magick/image.c&quot;.</li>
  1109  <li>magick/colormap.c (ReallocateImageColormap): New function to
  1110  reallocate an image colormap.</li>
  1111  <li>coders/logo.c: Make more static data const.</li>
  1112  <li>magick/module_aliases.h: Make more static data const.</li>
  1113  <li>magick/static.c: Make more static data const.</li>
  1114  </ul>
  1115  </blockquote>
  1116  <p>2019-04-01  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1117  <blockquote>
  1118  <ul class="simple">
  1119  <li>magick/log.c (LogMagickEventList): Log elapsed time with
  1120  microsecond precision.</li>
  1121  </ul>
  1122  </blockquote>
  1123  <p>2019-03-31  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1124  <blockquote>
  1125  <ul class="simple">
  1126  <li>coders/mpc.c (ReadMPCImage): Deal with a profile length of zero,
  1127  or an irrationally large profile length.  Fixes SourceForge issue
  1128  #601 &quot;memory leak in function ReadMPCImage of coders/mpc.c &quot;.</li>
  1129  <li>magick/xwindow.c (MagickXGetWindowInfo): Deal with the unlikely
  1130  case that the memory allocation for window-&gt;segment_info
  1131  fails. Fixes SourceForge #595 &quot;use allocate memory before null
  1132  check&quot; as pertains to magick/xwindow.c.</li>
  1133  <li>magick/segment.c (Classify): Add check for memory allocation
  1134  failure when allocating cluster array. Fixes SourceForge #595 &quot;use
  1135  allocate memory before null check&quot; as pertains to
  1136  magick/segment.c.</li>
  1137  <li>coders/pdb.c (ReadPDBImage): Fix use of allocated memory before
  1138  null check.  Fixes SourceForge #595 &quot;use allocate memory before
  1139  null check&quot; as pertains to coders/pdb.c.</li>
  1140  </ul>
  1141  </blockquote>
  1142  <p>2019-03-30  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1143  <blockquote>
  1144  <ul class="simple">
  1145  <li>magick/pixel_cache.c (AllocateThreadViewSet): Simplify the image
  1146  view model by adding NexusInfo to the View structure (rather than
  1147  referencing it via a pointer) to lessen the number of required
  1148  per-thread allocations and to improve locality of reference.</li>
  1149  </ul>
  1150  </blockquote>
  1151  <p>2019-03-22  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1152  <blockquote>
  1153  <ul class="simple">
  1154  <li>coders/wpg.c (WPG1_Palette): Change to a static declaration.</li>
  1155  <li>coders/dcm.c: dicom_info array is now fully in the data segment.</li>
  1156  </ul>
  1157  </blockquote>
  1158  <p>2019-03-18  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1159  <blockquote>
  1160  <ul class="simple">
  1161  <li>configure.ac: Add support for using the Solaris mtmalloc
  1162  library.  This is primarily for testing or as an alternative to
  1163  Solaris umem.
  1164  Stop using posix_memalign() until it is uniformly more mature and
  1165  reliably quick.</li>
  1166  </ul>
  1167  </blockquote>
  1168  <p>2019-03-17  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1169  <blockquote>
  1170  <ul class="simple">
  1171  <li>magick/pixel_cache.c (SetNexus): Smallest staging-area
  1172  allocation is cache line size so declare it as such.</li>
  1173  <li>magick/fx.c: Functions in the fx module which return a new Image
  1174  should return a null Image if an exception was thrown.  Also,
  1175  assure that user has an opportunity to see the exception which was
  1176  thrown.</li>
  1177  <li>magick/error.c (ThrowLoggedException): Throwing an exception is
  1178  now thread-safe.</li>
  1179  <li>magick/pixel_cache-private.h: Moved pixel cache private
  1180  definitions to private header.</li>
  1181  </ul>
  1182  </blockquote>
  1183  <p>2019-03-10  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1184  <blockquote>
  1185  <ul class="simple">
  1186  <li>magick/pixel_cache.c (SetNexus): Pass x, y, columns, and rows
  1187  rather than a pointer to RectangleInfo.  This should be easier to
  1188  inline on modern CPUs.</li>
  1189  </ul>
  1190  </blockquote>
  1191  <p>2019-03-09  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1192  <blockquote>
  1193  <ul class="simple">
  1194  <li>magick/pixel_cache.c (SetNexus): Cache resource limits in
  1195  CacheInfo rather than repeatedly calling into the resource code in
  1196  order to lessen the overhead of performing resource limit checks
  1197  on the pixel cache views.</li>
  1198  <li>magick/resource.c (AcquireMagickResource): Use a lock for each
  1199  resource in order to lessen contention.  Return a maximum 64-bit
  1200  integer value if the resource has not been limited.  Previously
  1201  returned -1 in this case but this was not documented.</li>
  1202  </ul>
  1203  </blockquote>
  1204  <p>2019-03-07  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1205  <blockquote>
  1206  <ul class="simple">
  1207  <li>magick/import.c (ImportViewPixelArea): If range between max and
  1208  min is less than MagickEpsilon, produce a black image rather than
  1209  throwing an exception.</li>
  1210  <li>coders/mat.c (ReadMATImage): Fix memory leak on unexpected end
  1211  of file.  Fixes oss-fuzz 13556 &quot;graphicsmagick/coder_MAT_fuzzer:
  1212  Direct-leak in ReadMATImage&quot;. (Credit to OSS-Fuzz)</li>
  1213  </ul>
  1214  </blockquote>
  1215  <p>2019-03-06  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1216  <blockquote>
  1217  <ul class="simple">
  1218  <li>coders/mat.c (ReadMATImage): Quit if image scanlines are not
  1219  fully populated due to exception.  Fixes oss-fuzz 13530
  1220  &quot;graphicsmagick/coder_MAT_fuzzer: Use-of-uninitialized-value in
  1221  InsertComplexFloatRow&quot;. (Credit to OSS-Fuzz)</li>
  1222  </ul>
  1223  </blockquote>
  1224  <p>2019-03-04  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1225  <blockquote>
  1226  <ul class="simple">
  1227  <li>coders/txt.c (ReadTXTImage): Don't start new line if x_max &lt;
  1228  x_min.  Avoids calling SetImagePixels() with a width of zero.
  1229  Related to oss-fuzz 13521 &quot;graphicsmagick/coder_TEXT_fuzzer:
  1230  Floating-point-exception in SetNexus&quot;. (Credit to OSS-Fuzz)</li>
  1231  <li>magick/pixel_cache.c (SetNexus): Report error for empty region
  1232  rather than crashing due to divide by zero exception. This is a
  1233  new bug due to yesterday's changes.  Fixes oss-fuzz 13521
  1234  &quot;graphicsmagick/coder_TEXT_fuzzer: Floating-point-exception in
  1235  SetNexus&quot;. (Credit to OSS-Fuzz)</li>
  1236  </ul>
  1237  </blockquote>
  1238  <p>2019-03-03  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1239  <blockquote>
  1240  <ul class="simple">
  1241  <li>design/pixel-cache.dot: Update design dot diagram to remove
  1242  IsNexusInCore and add CompositeCacheNexus.</li>
  1243  <li>magick/pixel_cache.c (SetNexus): Apply resource limits to pixel
  1244  nexus allocations using the same limits (total pixels, width,
  1245  height, memory) as applied to the whole image since some requests
  1246  are directly influenced by the input file.  Add yet more tests for
  1247  arithmetic overflow.  Whole source module is re-arranged so that
  1248  static functions are in order of dependency so that forward
  1249  prototype declarations are no longer needed.  Fixes oss-fuzz 13210
  1250  &quot;graphicsmagick/coder_MVG_fuzzer: Integer-overflow in
  1251  SetNexus&quot;. (Credit to OSS-Fuzz)</li>
  1252  </ul>
  1253  </blockquote>
  1254  <p>2019-03-02  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1255  <blockquote>
  1256  <ul class="simple">
  1257  <li>magick/pixel_cache.c (OpenCache): Use unsigned 64-bit value to
  1258  store CacheInfo offset and length as well as for the total pixels
  1259  calculation.  Add some more arithmetic overflow detections.</li>
  1260  <li>coders/topol.c (ReadTOPOLImage): Report a corrupt image
  1261  exception &quot;Unexpected end-of-file&quot; if reader encounters end of
  1262  file while reading header rows.  Addresses oss-fuzz 7981
  1263  &quot;graphicsmagick/coder_TOPOL_fuzzer: Use-of-uninitialized-value in
  1264  InsertRow&quot;. (Credit to OSS-Fuzz)</li>
  1265  <li>coders/mat.c (ReadMATImage): Report a corrupt image exception
  1266  &quot;Unexpected end-of-file&quot; if reader encounters end of file while
  1267  reading scanlines.  Also added some helpful traces.  Hopefully
  1268  addresses oss-fuzz 13445 &quot;graphicsmagick/coder_MAT_fuzzer:
  1269  Use-of-uninitialized-value in IsGrayImage&quot;. (Credit to OSS-Fuzz)</li>
  1270  </ul>
  1271  </blockquote>
  1272  <p>2019-02-26  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1273  <blockquote>
  1274  <ul class="simple">
  1275  <li>magick/image.h (&quot;C&quot;): Include as &quot;magick/image-private.h&quot; as the
  1276  other headers are.
  1277  (&quot;C&quot;): Include &quot;magick/image-private.h&quot; inside the protective
  1278  MAGICK_IMPLEMENTATION guard, as it should have been.  This error
  1279  broke the oss-fuzz build.</li>
  1280  </ul>
  1281  </blockquote>
  1282  <p>2019-02-24  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1283  <blockquote>
  1284  <ul class="simple">
  1285  <li>magick/image-private.h (_ImageExtra): Put ImageExtra definition
  1286  in a private header file so that its definition may be accessed
  1287  directly by library internals.  Add some accessor macros to
  1288  provide access and update code to use them.</li>
  1289  <li>coders/wpg.c (ReallocColormap): Make sure that there is not a
  1290  heap overwrite if the number of colors has been reduced.  Thanks
  1291  to Jaroslav Fojtik for giving me a heads up about this.</li>
  1292  </ul>
  1293  </blockquote>
  1294  <p>2019-02-23  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1295  <blockquote>
  1296  <ul class="simple">
  1297  <li>magick/monitor.c (MagickMonitorActive): Add new private function
  1298  to test if a progress monitor is active.  Update all progress
  1299  monitor code in loops to use this information, while also updating
  1300  code to hopefully address concerns expressed by Hongxu Chen about
  1301  data races on the graphicsmagick-bugs mailing list starting on
  1302  February 6, 2019.</li>
  1303  </ul>
  1304  </blockquote>
  1305  <p>2019-02-21  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1306  <blockquote>
  1307  <ul class="simple">
  1308  <li>coders/mpc.c (ReadMPCImage): Tally directory length to avoid
  1309  death by strlen().</li>
  1310  <li>coders/miff.c (ReadMIFFImage): Tally directory length to avoid
  1311  death by strlen().  Fixes oss-fuzz 13190
  1312  &quot;graphicsmagick/coder_MIFF_fuzzer: Timeout in
  1313  graphicsmagick_coder_MIFF_fuzzer&quot;. (Credit to OSS-Fuzz)</li>
  1314  </ul>
  1315  </blockquote>
  1316  <p>2019-02-17  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1317  <blockquote>
  1318  <ul class="simple">
  1319  <li>coders/svg.c (ReadSVGImage): Don't call xmlCleanupParser()
  1320  in module code since this may cause other libxml users to fail.</li>
  1321  <li>coders/msl.c (ProcessMSLScript): Don't call xmlCleanupParser()
  1322  in module code since this may cause other libxml users to fail.</li>
  1323  <li>magick/render.c (DrawDashPolygon): (DrawDashPolygon): Don't read
  1324  beyond end of dash pattern array.  This is a second instance of
  1325  issue identified by SourceForge issue #591.  Fixes oss-fuzz 13160
  1326  &quot;graphicsmagick/coder_MVG_fuzzer: Heap-buffer-overflow in
  1327  DrawDashPolygon&quot;.  The earlier attempt to fix this problem today
  1328  broke dash patterns entirely.  (Credit to OSS-Fuzz)</li>
  1329  <li>magick/annotate.c (RenderFreetype): Eliminate memory leak of
  1330  GlyphInfo.image (type FT_Glyph) while rendering some FreeType
  1331  fonts such as the one we use now in the Magick++ test suite.</li>
  1332  </ul>
  1333  </blockquote>
  1334  <p>2019-02-16  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1335  <blockquote>
  1336  <ul class="simple">
  1337  <li>magick/render.c (DrawDashPolygon): Avoid reading one beyond
  1338  length of dash pattern array, which is terminated by value 0.0.
  1339  Fixes SourceForge issue #591 &quot;Heap buffer overflow in
  1340  DrawDashPolygon when parsing SVG images&quot;.
  1341  (DrawPrimitive): Add arithmetic overflow checks when converting
  1342  computed coordinates from 'double' to 'long'.
  1343  (DrawImage): Don't destroy draw_info in graphic_context when
  1344  draw_info has not been allocated yet.  Problem reported via email
  1345  by Sami Supperi on Thu, 14 Feb 2019.</li>
  1346  <li>coders/jpeg.c (ReadJPEGImage): JPEG files are observed to
  1347  provide compression ratios as high as 2500 so allow for that.
  1348  Also, the test for &quot;Unreasonable dimensions&quot; delivered yesterday
  1349  was flawed since magick_rows and magick_columns are only set if a
  1350  desired image size was provided.  Fixes SourceForge issue 592
  1351  &quot;Non-malicious JPEG file fails with &quot;Unreasonable dimensions&quot;&quot;.</li>
  1352  <li>coders/tiff.c (ReadTIFFImage): Only disassociate alpha channel
  1353  for images where photometic is PHOTOMETRIC_RGB. Fixes oss-fuzz
  1354  13115 &quot;graphicsmagick/coder_PTIF_fuzzer:
  1355  Use-of-uninitialized-value in DisassociateAlphaRegion&quot;. (Credit to
  1356  OSS-Fuzz)</li>
  1357  </ul>
  1358  </blockquote>
  1359  <p>2019-02-15  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1360  <blockquote>
  1361  <ul class="simple">
  1362  <li>coders/jpeg.c (ReadJPEGImage): Base test for &quot;Unreasonable
  1363  dimensions&quot; on original JPEG dimensions and not the scaled
  1364  dimensions.  Fixes SourceForge issue 593 &quot;gm convert: Insufficient
  1365  image data in file when hinting input image&quot;.</li>
  1366  </ul>
  1367  </blockquote>
  1368  <p>2019-02-13  Troy Patteson  &lt;<a class="reference external" href="mailto:troyp&#37;&#52;&#48;ieee&#46;org">troyp<span>&#64;</span>ieee<span>&#46;</span>org</a>&gt;</p>
  1369  <blockquote>
  1370  <ul class="simple">
  1371  <li>PerlMagick/Magick.xs (Mogrify): Add decorate argument to Annotate.</li>
  1372  <li>PerlMagick/Magick.xs (Mogrify): Remove reference to undefined
  1373  Annotate argument.</li>
  1374  </ul>
  1375  </blockquote>
  1376  <p>2019-02-12  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1377  <blockquote>
  1378  <ul class="simple">
  1379  <li>coders/tiff.c (ReadTIFFImage): For planar TIFF, make sure that
  1380  pixels are initialized in case some planes are missing.  Fixes
  1381  oss-fuzz 13046 &quot;graphicsmagick/coder_PTIF_fuzzer:
  1382  Use-of-uninitialized-value in DisassociateAlphaRegion&quot;. (Credit to
  1383  OSS-Fuzz)</li>
  1384  </ul>
  1385  </blockquote>
  1386  <p>2019-02-11  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1387  <blockquote>
  1388  <ul class="simple">
  1389  <li>coders/pdf.c (WritePDFImage): Make sure to free 'xref' before
  1390  returning.  Similar to ImageMagick CVE-2019-7397 &quot;In ImageMagick
  1391  before 7.0.8-25, several memory leaks exist in WritePDFImage in
  1392  coders/pdf.c.&quot;.  Thanks to Petr Gajdos for bringing this issue to
  1393  our attention.</li>
  1394  </ul>
  1395  </blockquote>
  1396  <p>2019-02-10  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1397  <blockquote>
  1398  <ul class="simple">
  1399  <li>coders/wpg.c (ReadWPGImage): Use a different way to reallocate
  1400  the colormap which preserves existing content, but also updates
  1401  image-&gt;colors and assures that added palette entries are
  1402  initialized.</li>
  1403  <li>coders/png.c (ReadMNGImage): Bound maximum loop iterations by
  1404  subrange as a primitive means of limiting resource consumption.
  1405  This should finally resolve oss-fuzz 12738
  1406  &quot;graphicsmagick/enhance_fuzzer: Out-of-memory in
  1407  graphicsmagick_enhance_fuzzer&quot;. (Credit to OSS-Fuzz)</li>
  1408  <li>coders/tiff.c (ReadTIFFImage): Assure that opacity channel is
  1409  initialized in the RGBAStrippedMethod case.  Convert
  1410  'CorruptImageError' encountered while testing for more frames to
  1411  'CorruptImageWarning' so we return the frames already read.
  1412  Second try at fixing oss-fuzz 11896
  1413  &quot;graphicsmagick/coder_PTIF_fuzzer: Use-of-uninitialized-value in
  1414  VerticalFilter&quot;.</li>
  1415  <li>coders/dpx.c (AttributeToString): Eliminate clang
  1416  &quot;-Wstring-plus-int&quot; warning observed in oss-fuzz build.</li>
  1417  <li>coders/cineon.c (AttributeToString): Eliminate clang
  1418  &quot;-Wstring-plus-int&quot; warning observed in oss-fuzz build.</li>
  1419  </ul>
  1420  </blockquote>
  1421  <p>2019-02-09  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1422  <blockquote>
  1423  <ul class="simple">
  1424  <li>coders/pict.c (DecodeImage): Avoide a one-byte over-read of
  1425  pixels heap allocation.  The cause of the over-read is not yet
  1426  understood.  Fixes oss-fuzz 12019
  1427  &quot;graphicsmagick/coder_PICT_fuzzer: Heap-buffer-overflow in
  1428  ExpandBuffer&quot;. (Credit to OSS-Fuzz)</li>
  1429  <li>coders/wpg.c (ReadWPGImage): Assure that all colormap entries
  1430  are initialized.  Fixes oss-fuzz 12614
  1431  &quot;graphicsmagick/enhance_fuzzer: Use-of-uninitialized-value in
  1432  EnhanceImage&quot;. (Credit to OSS-Fuzz)</li>
  1433  <li>coders/tiff.c (ReadTIFFImage): Make sure that image is in
  1434  DirectClass mode and ignore any claimed colormap when the image is
  1435  read using the RGBAStrippedMethod, RGBATiledMethod, or
  1436  RGBAPuntMethod cases.  Fixes oss-fuzz 12195
  1437  &quot;graphicsmagick/coder_PTIF_fuzzer: Use-of-uninitialized-value in
  1438  ExportGrayQuantumType&quot;. (Credit to OSS-Fuzz)</li>
  1439  <li>coders/miff.c (ReadMIFFImage): Improve pixel buffer calculations
  1440  to defend against overflow.  Assure that zlib and bzlib decode the
  1441  expected number of bytes for a pixel row.  Fixes oss-fuzz issue
  1442  12448 &quot;graphicsmagick/coder_MIFF_fuzzer:
  1443  Use-of-uninitialized-value in RGBTransformPackets&quot;. (Credit to
  1444  OSS-Fuzz)</li>
  1445  </ul>
  1446  </blockquote>
  1447  <p>2019-02-08  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1448  <blockquote>
  1449  <ul class="simple">
  1450  <li>coders/png.c (ReadMNGImage): Quit processing and report error
  1451  upon failure to insert MNG background layer.  Fixes oss-fuzz 12738
  1452  &quot;graphicsmagick/enhance_fuzzer: Out-of-memory in
  1453  graphicsmagick_enhance_fuzzer&quot;. (Credit to OSS-Fuzz)</li>
  1454  </ul>
  1455  </blockquote>
  1456  <p>2019-02-03  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1457  <blockquote>
  1458  <ul class="simple">
  1459  <li>coders/dib.c (ReadDIBImage, WriteDIBImage): Improve buffer-size
  1460  calculations to guard against buffer overflows.  The reader
  1461  version was not as complete as it should have been, whereas the
  1462  writer version did not guard against arithmetic overflow at all.</li>
  1463  <li>coders/bmp.c (ReadBMPImage, WriteBMPImage): Improve buffer-size
  1464  calculations to guard against buffer overflows.  This is a
  1465  follow-on fix to the previous fix submitted for SourceForge issue
  1466  #582 &quot;heap-buffer-overflow in ReadBMPImage of bmp.c&quot; which is now
  1467  also identified as CVE-2018-20185.</li>
  1468  <li>www/Hg.rst: Updates to reflect current usage and availability.</li>
  1469  <li>www/authors.rst: Promote Troy Patteson to the active contributor
  1470  category.</li>
  1471  </ul>
  1472  </blockquote>
  1473  <p>2019-02-01  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1474  <blockquote>
  1475  <ul class="simple">
  1476  <li>magick/version.h.in: Rotate ChangeLog and update copyright
  1477  statements for the new year.</li>
  1478  </ul>
  1479  </blockquote>
  1480  <p>2019-01-30  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1481  <blockquote>
  1482  <ul class="simple">
  1483  <li>coders/webp.c (WriteWEBPImage): Patch by Przemysław Sobala to
  1484  support WebP 'use_sharp_yuv' option (&quot;if needed, use sharp (and
  1485  slow) RGB-&gt;YUV conversion&quot;) via <cite>-define webp:use-sharp-yuv=true</cite>.</li>
  1486  </ul>
  1487  </blockquote>
  1488  <p>2019-01-05  Bob Friesenhahn  &lt;<a class="reference external" href="mailto:bfriesen&#37;&#52;&#48;simple&#46;dallas&#46;tx&#46;us">bfriesen<span>&#64;</span>simple<span>&#46;</span>dallas<span>&#46;</span>tx<span>&#46;</span>us</a>&gt;</p>
  1489  <blockquote>
  1490  <ul class="simple">
  1491  <li>magick/pixel_cache.c (SetNexus): Merge IsNexusInCore()
  1492  implementation code into SetNexus() and add check for if
  1493  cache_info-&gt;pixels is null.  Fixes SourceForge issue #588 &quot;Bug in
  1494  IsNexusInCore()&quot;.</li>
  1495  <li>configure.ac (DcrawExtraOptions): Request TIFF output from dcraw
  1496  if build supports TIFF format in order to obtain more metadata.
  1497  This allows obtaining some metadata from standard TIFF tags
  1498  (e.g. camera make, model, and dcraw version), and any attached ICC
  1499  profile, but not specifically EXIF data since we don't support
  1500  extracting EXIF data from TIFF yet. Inspired by SourceForge issue
  1501  589 &quot;Identify lack of data (no Exif) in RAW formats&quot;.</li>
  1502  </ul>
  1503  </blockquote>
  1504  </div>
  1505  </body>
  1506  </html>