upgrade libpng to 1.6.55

e203c684 · mercury233 · e490863c · e203c684 · e203c684 · e203c684
Commit e203c684 authored Feb 23, 2026 by mercury233
15 changed files
--- a/source/Irrlicht/libpng/ANNOUNCE
+++ b/source/Irrlicht/libpng/ANNOUNCE
-libpng 1.6.54 - January 12, 2026
+libpng 1.6.55 - February 9, 2026
 ================================

 This is a public release of libpng, intended for use in production code.
@@ -9,10 +9,10 @@ Files available for download

 Source files:

- * libpng-1.6.54.tar.xz (LZMA-compressed, recommended)
- * libpng-1.6.54.tar.gz (deflate-compressed)
- * lpng1654.7z (LZMA-compressed)
- * lpng1654.zip (deflate-compressed)
+ * libpng-1.6.55.tar.xz (LZMA-compressed, recommended)
+ * libpng-1.6.55.tar.gz (deflate-compressed)
+ * lpng1655.7z (LZMA-compressed)
+ * lpng1655.zip (deflate-compressed)

 Other information:

@@ -22,18 +22,16 @@ Other information:
 * TRADEMARK.md


-Changes from version 1.6.53 to version 1.6.54
+Changes from version 1.6.54 to version 1.6.55
 ---------------------------------------------

- * Fixed CVE-2026-22695 (medium severity):
-   Heap buffer over-read in `png_image_read_direct_scaled.
-   (Reported and fixed by Petr Simecek.)
- * Fixed CVE-2026-22801 (medium severity):
-   Integer truncation causing heap buffer over-read in `png_image_write_*`.
- * Implemented various improvements in oss-fuzz.
+ * Fixed CVE-2026-25646 (high severity):
+   Heap buffer overflow in `png_set_quantize`.
+   (Reported and fixed by Joshua Inscoe.)
+ * Resolved an oss-fuzz build issue involving nalloc.
   (Contributed by Philippe Antoine.)

 Send comments/corrections/commendations to png-mng-implement at lists.sf.net.
 Subscription is required; visit
-https://lists.sourceforge.net/lists/listinfo/png-mng-implement
+<https://lists.sourceforge.net/lists/listinfo/png-mng-implement>
 to subscribe.
--- a/source/Irrlicht/libpng/AUTHORS
+++ b/source/Irrlicht/libpng/AUTHORS
@@ -17,6 +17,7 @@ Authors, for copyright and licensing purposes.
 * Guy Eric Schalnat
 * James Yu
 * John Bowler
+ * Joshua Inscoe
 * Kevin Bracey
 * Lucas Chollet
 * Magnus Holmgren

--- a/source/Irrlicht/libpng/CHANGES
+++ b/source/Irrlicht/libpng/CHANGES
@@ -5988,7 +5988,7 @@ Version 1.6.32rc01 [August 18, 2017]

 Version 1.6.32rc02 [August 22, 2017]
  Added contrib/oss-fuzz directory which contains files used by the oss-fuzz
-    project (https://github.com/google/oss-fuzz/tree/master/projects/libpng).
+    project <https://github.com/google/oss-fuzz/tree/master/projects/libpng>.

 Version 1.6.32 [August 24, 2017]
  No changes.
@@ -6323,15 +6323,21 @@ Version 1.6.53 [December 5, 2025]

 Version 1.6.54 [January 12, 2026]
  Fixed CVE-2026-22695 (medium severity):
-    Heap buffer over-read in `png_image_read_direct_scaled.
+    Heap buffer over-read in `png_image_read_direct_scaled`.
    (Reported and fixed by Petr Simecek.)
  Fixed CVE-2026-22801 (medium severity):
    Integer truncation causing heap buffer over-read in `png_image_write_*`.
  Implemented various improvements in oss-fuzz.
    (Contributed by Philippe Antoine.)

+Version 1.6.55 [February 9, 2026]
+  Fixed CVE-2026-25646 (high severity):
+    Heap buffer overflow in `png_set_quantize`.
+    (Reported and fixed by Joshua Inscoe.)
+  Resolved an oss-fuzz build issue involving nalloc.
+    (Contributed by Philippe Antoine.)

 Send comments/corrections/commendations to png-mng-implement at lists.sf.net.
 Subscription is required; visit
-https://lists.sourceforge.net/lists/listinfo/png-mng-implement
+<https://lists.sourceforge.net/lists/listinfo/png-mng-implement>
 to subscribe.
--- a/source/Irrlicht/libpng/CMakeLists.txt
+++ b/source/Irrlicht/libpng/CMakeLists.txt
@@ -18,7 +18,7 @@ cmake_minimum_required(VERSION 3.14...4.2)

 set(PNGLIB_MAJOR 1)
 set(PNGLIB_MINOR 6)
-set(PNGLIB_REVISION 54)
+set(PNGLIB_REVISION 55)
 set(PNGLIB_SUBREVISION 0)
 #set(PNGLIB_SUBREVISION "git")
 set(PNGLIB_VERSION ${PNGLIB_MAJOR}.${PNGLIB_MINOR}.${PNGLIB_REVISION})

--- a/source/Irrlicht/libpng/README
+++ b/source/Irrlicht/libpng/README
-README for libpng version 1.6.54
+README for libpng version 1.6.55
 ================================

 See the note about version numbers near the top of `png.h`.
@@ -24,14 +24,14 @@ for more things than just PNG files.  You can use zlib as a drop-in
 replacement for `fread()` and `fwrite()`, if you are so inclined.

 zlib should be available at the same place that libpng is, or at
-https://zlib.net .
+<https://zlib.net>.

 You may also want a copy of the PNG specification.  It is available
 as an RFC, a W3C Recommendation, and an ISO/IEC Standard.  You can find
-these at http://www.libpng.org/pub/png/pngdocs.html .
+these at <http://www.libpng.org/pub/png/pngdocs.html>.

-This code is currently being archived at https://libpng.sourceforge.io
-in the download area, and at http://libpng.download/src .
+This code is currently being archived at <https://libpng.sourceforge.io>
+in the download area, and at <http://libpng.download/src>.

 This release, based in a large way on Glenn's, Guy's and Andreas'
 earlier work, was created and will be supported by myself and the PNG
@@ -39,12 +39,12 @@ development group.

 Send comments, corrections and commendations to `png-mng-implement`
 at `lists.sourceforge.net`.  (Subscription is required; visit
-https://lists.sourceforge.net/lists/listinfo/png-mng-implement
+<https://lists.sourceforge.net/lists/listinfo/png-mng-implement>
 to subscribe.)

 Send general questions about the PNG specification to `png-mng-misc`
 at `lists.sourceforge.net`.  (Subscription is required; visit
-https://lists.sourceforge.net/lists/listinfo/png-mng-misc
+<https://lists.sourceforge.net/lists/listinfo/png-mng-misc>
 to subscribe.)

 Historical notes

--- a/source/Irrlicht/libpng/TODO
+++ b/source/Irrlicht/libpng/TODO
 TODO list for libpng
--------------------
+====================

 * Fix all defects (duh!)
 * cHRM transformation.

--- a/source/Irrlicht/libpng/libpng-manual.txt
+++ b/source/Irrlicht/libpng/libpng-manual.txt
 libpng-manual.txt - A description on how to use and modify libpng

- Copyright (c) 2018-2025 Cosmin Truta
+ Copyright (c) 2018-2026 Cosmin Truta
 Copyright (c) 1998-2018 Glenn Randers-Pehrson

 This document is released under the libpng license.
@@ -9,7 +9,7 @@ libpng-manual.txt - A description on how to use and modify libpng

 Based on:

- libpng version 1.6.36, December 2018, through 1.6.54 - January 2026
+ libpng version 1.6.36, December 2018, through 1.6.55 - February 2026
 Updated and distributed by Cosmin Truta
 Copyright (c) 2018-2026 Cosmin Truta


--- a/source/Irrlicht/libpng/libpng.3
+++ b/source/Irrlicht/libpng/libpng.3
-.TH LIBPNG 3 "January 12, 2026"
+.TH LIBPNG 3 "February 9, 2026"
 .SH NAME
-libpng \- Portable Network Graphics (PNG) Reference Library 1.6.54
+libpng \- Portable Network Graphics (PNG) Reference Library 1.6.55

 .SH SYNOPSIS
 \fB#include <png.h>\fP
@@ -519,7 +519,7 @@ Following is a copy of the libpng-manual.txt file that accompanies libpng.
 .SH LIBPNG.TXT
 libpng-manual.txt - A description on how to use and modify libpng

- Copyright (c) 2018-2025 Cosmin Truta
+ Copyright (c) 2018-2026 Cosmin Truta
 Copyright (c) 1998-2018 Glenn Randers-Pehrson

 This document is released under the libpng license.
@@ -528,7 +528,7 @@ libpng-manual.txt - A description on how to use and modify libpng

 Based on:

- libpng version 1.6.36, December 2018, through 1.6.54 - January 2026
+ libpng version 1.6.36, December 2018, through 1.6.55 - February 2026
 Updated and distributed by Cosmin Truta
 Copyright (c) 2018-2026 Cosmin Truta


--- a/source/Irrlicht/libpng/libpngpf.3
+++ b/source/Irrlicht/libpng/libpngpf.3
-.TH LIBPNGPF 3 "January 12, 2026"
+.TH LIBPNGPF 3 "February 9, 2026"
 .SH NAME
-libpng \- Portable Network Graphics (PNG) Reference Library 1.6.54
+libpng \- Portable Network Graphics (PNG) Reference Library 1.6.55

 .SH SYNOPSIS
 \fB#include "pngpriv.h"\fP

--- a/source/Irrlicht/libpng/png.5
+++ b/source/Irrlicht/libpng/png.5
-.TH PNG 5 "January 12, 2026"
+.TH PNG 5 "February 9, 2026"
 .SH NAME
 png \- Portable Network Graphics (PNG) format


--- a/source/Irrlicht/libpng/png.c
+++ b/source/Irrlicht/libpng/png.c
@@ -13,7 +13,7 @@
 #include "pngpriv.h"

 /* Generate a compiler error if there is an old png.h in the search path. */
-typedef png_libpng_version_1_6_54 Your_png_h_is_not_version_1_6_54;
+typedef png_libpng_version_1_6_55 Your_png_h_is_not_version_1_6_55;

 /* Sanity check the chunks definitions - PNG_KNOWN_CHUNKS from pngpriv.h and the
 * corresponding macro definitions.  This causes a compile time failure if
@@ -820,7 +820,7 @@ png_get_copyright(png_const_structrp png_ptr)
   return PNG_STRING_COPYRIGHT
 #else
   return PNG_STRING_NEWLINE \
-      "libpng version 1.6.54" PNG_STRING_NEWLINE \
+      "libpng version 1.6.55" PNG_STRING_NEWLINE \
      "Copyright (c) 2018-2026 Cosmin Truta" PNG_STRING_NEWLINE \
      "Copyright (c) 1998-2002,2004,2006-2018 Glenn Randers-Pehrson" \
      PNG_STRING_NEWLINE \

--- a/source/Irrlicht/libpng/png.h
+++ b/source/Irrlicht/libpng/png.h
 /* png.h - header file for PNG reference library
 *
- * libpng version 1.6.54
+ * libpng version 1.6.55
 *
 * Copyright (c) 2018-2026 Cosmin Truta
 * Copyright (c) 1998-2002,2004,2006-2018 Glenn Randers-Pehrson
@@ -14,7 +14,7 @@
 *   libpng versions 0.89, June 1996, through 0.96, May 1997: Andreas Dilger
 *   libpng versions 0.97, January 1998, through 1.6.35, July 2018:
 *     Glenn Randers-Pehrson
- *   libpng versions 1.6.36, December 2018, through 1.6.54, January 2026:
+ *   libpng versions 1.6.36, December 2018, through 1.6.55, February 2026:
 *     Cosmin Truta
 *   See also "Contributing Authors", below.
 */
@@ -238,7 +238,7 @@
 *    ...
 *    1.5.30                  15    10530  15.so.15.30[.0]
 *    ...
- *    1.6.54                  16    10654  16.so.16.54[.0]
+ *    1.6.55                  16    10655  16.so.16.55[.0]
 *
 *    Henceforth the source version will match the shared-library major and
 *    minor numbers; the shared-library major version number will be used for
@@ -274,7 +274,7 @@
 */

 /* Version information for png.h - this should match the version in png.c */
-#define PNG_LIBPNG_VER_STRING "1.6.54"
+#define PNG_LIBPNG_VER_STRING "1.6.55"
 #define PNG_HEADER_VERSION_STRING " libpng version " PNG_LIBPNG_VER_STRING "\n"

 /* The versions of shared library builds should stay in sync, going forward */
@@ -285,7 +285,7 @@
 /* These should match the first 3 components of PNG_LIBPNG_VER_STRING: */
 #define PNG_LIBPNG_VER_MAJOR   1
 #define PNG_LIBPNG_VER_MINOR   6
-#define PNG_LIBPNG_VER_RELEASE 54
+#define PNG_LIBPNG_VER_RELEASE 55

 /* This should be zero for a public release, or non-zero for a
 * development version.
@@ -316,7 +316,7 @@
 * From version 1.0.1 it is:
 * XXYYZZ, where XX=major, YY=minor, ZZ=release
 */
-#define PNG_LIBPNG_VER 10654 /* 1.6.54 */
+#define PNG_LIBPNG_VER 10655 /* 1.6.55 */

 /* Library configuration: these options cannot be changed after
 * the library has been built.
@@ -426,7 +426,7 @@ extern "C" {
 /* This triggers a compiler error in png.c, if png.c and png.h
 * do not agree upon the version number.
 */
-typedef char *png_libpng_version_1_6_54;
+typedef char *png_libpng_version_1_6_55;

 /* Basic control structions.  Read libpng-manual.txt or libpng.3 for more info.
 *

--- a/source/Irrlicht/libpng/pngconf.h
+++ b/source/Irrlicht/libpng/pngconf.h
 /* pngconf.h - machine-configurable file for libpng
 *
- * libpng version 1.6.54
+ * libpng version 1.6.55
 *
 * Copyright (c) 2018-2026 Cosmin Truta
 * Copyright (c) 1998-2002,2004,2006-2016,2018 Glenn Randers-Pehrson

--- a/source/Irrlicht/libpng/pngrtran.c
+++ b/source/Irrlicht/libpng/pngrtran.c
 /* pngrtran.c - transforms the data in a row for PNG readers
 *
- * Copyright (c) 2018-2025 Cosmin Truta
+ * Copyright (c) 2018-2026 Cosmin Truta
 * Copyright (c) 1998-2002,2004,2006-2018 Glenn Randers-Pehrson
 * Copyright (c) 1996-1997 Andreas Dilger
 * Copyright (c) 1995-1996 Guy Eric Schalnat, Group 42, Inc.
@@ -708,8 +708,8 @@ png_set_quantize(png_structrp png_ptr, png_colorp palette,
                         break;

                     t->next = hash[d];
-                     t->left = (png_byte)i;
-                     t->right = (png_byte)j;
+                     t->left = png_ptr->palette_to_index[i];
+                     t->right = png_ptr->palette_to_index[j];
                     hash[d] = t;
                  }
               }

--- a/source/Irrlicht/libpng/pngtest.c
+++ b/source/Irrlicht/libpng/pngtest.c
@@ -50,7 +50,7 @@
 #define STDERR stdout

 /* Generate a compiler error if there is an old png.h in the search path. */
-typedef png_libpng_version_1_6_54 Your_png_h_is_not_version_1_6_54;
+typedef png_libpng_version_1_6_55 Your_png_h_is_not_version_1_6_55;

 /* Ensure that all version numbers in png.h are consistent with one another. */
 #if (PNG_LIBPNG_VER != PNG_LIBPNG_VER_MAJOR * 10000 + \