all repos — mgba @ 9de8f084ba55460b02d300c1dd8b8e6c56f691d5

mGBA Game Boy Advance Emulator

src/third-party/libpng/pngread.c (view raw)

   1
   2/* pngread.c - read a PNG file
   3 *
   4 * Last changed in libpng 1.6.33 [September 28, 2017]
   5 * Copyright (c) 1998-2002,2004,2006-2017 Glenn Randers-Pehrson
   6 * (Version 0.96 Copyright (c) 1996, 1997 Andreas Dilger)
   7 * (Version 0.88 Copyright (c) 1995, 1996 Guy Eric Schalnat, Group 42, Inc.)
   8 *
   9 * This code is released under the libpng license.
  10 * For conditions of distribution and use, see the disclaimer
  11 * and license in png.h
  12 *
  13 * This file contains routines that an application calls directly to
  14 * read a PNG file or stream.
  15 */
  16
  17#include "pngpriv.h"
  18#if defined(PNG_SIMPLIFIED_READ_SUPPORTED) && defined(PNG_STDIO_SUPPORTED)
  19#  include <errno.h>
  20#endif
  21
  22#ifdef PNG_READ_SUPPORTED
  23
  24/* Create a PNG structure for reading, and allocate any memory needed. */
  25PNG_FUNCTION(png_structp,PNGAPI
  26png_create_read_struct,(png_const_charp user_png_ver, png_voidp error_ptr,
  27    png_error_ptr error_fn, png_error_ptr warn_fn),PNG_ALLOCATED)
  28{
  29#ifndef PNG_USER_MEM_SUPPORTED
  30   png_structp png_ptr = png_create_png_struct(user_png_ver, error_ptr,
  31        error_fn, warn_fn, NULL, NULL, NULL);
  32#else
  33   return png_create_read_struct_2(user_png_ver, error_ptr, error_fn,
  34        warn_fn, NULL, NULL, NULL);
  35}
  36
  37/* Alternate create PNG structure for reading, and allocate any memory
  38 * needed.
  39 */
  40PNG_FUNCTION(png_structp,PNGAPI
  41png_create_read_struct_2,(png_const_charp user_png_ver, png_voidp error_ptr,
  42    png_error_ptr error_fn, png_error_ptr warn_fn, png_voidp mem_ptr,
  43    png_malloc_ptr malloc_fn, png_free_ptr free_fn),PNG_ALLOCATED)
  44{
  45   png_structp png_ptr = png_create_png_struct(user_png_ver, error_ptr,
  46       error_fn, warn_fn, mem_ptr, malloc_fn, free_fn);
  47#endif /* USER_MEM */
  48
  49   if (png_ptr != NULL)
  50   {
  51      png_ptr->mode = PNG_IS_READ_STRUCT;
  52
  53      /* Added in libpng-1.6.0; this can be used to detect a read structure if
  54       * required (it will be zero in a write structure.)
  55       */
  56#     ifdef PNG_SEQUENTIAL_READ_SUPPORTED
  57         png_ptr->IDAT_read_size = PNG_IDAT_READ_SIZE;
  58#     endif
  59
  60#     ifdef PNG_BENIGN_READ_ERRORS_SUPPORTED
  61         png_ptr->flags |= PNG_FLAG_BENIGN_ERRORS_WARN;
  62
  63         /* In stable builds only warn if an application error can be completely
  64          * handled.
  65          */
  66#        if PNG_RELEASE_BUILD
  67            png_ptr->flags |= PNG_FLAG_APP_WARNINGS_WARN;
  68#        endif
  69#     endif
  70
  71      /* TODO: delay this, it can be done in png_init_io (if the app doesn't
  72       * do it itself) avoiding setting the default function if it is not
  73       * required.
  74       */
  75      png_set_read_fn(png_ptr, NULL, NULL);
  76   }
  77
  78   return png_ptr;
  79}
  80
  81
  82#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
  83/* Read the information before the actual image data.  This has been
  84 * changed in v0.90 to allow reading a file that already has the magic
  85 * bytes read from the stream.  You can tell libpng how many bytes have
  86 * been read from the beginning of the stream (up to the maximum of 8)
  87 * via png_set_sig_bytes(), and we will only check the remaining bytes
  88 * here.  The application can then have access to the signature bytes we
  89 * read if it is determined that this isn't a valid PNG file.
  90 */
  91void PNGAPI
  92png_read_info(png_structrp png_ptr, png_inforp info_ptr)
  93{
  94#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
  95   int keep;
  96#endif
  97
  98   png_debug(1, "in png_read_info");
  99
 100   if (png_ptr == NULL || info_ptr == NULL)
 101      return;
 102
 103   /* Read and check the PNG file signature. */
 104   png_read_sig(png_ptr, info_ptr);
 105
 106   for (;;)
 107   {
 108      png_uint_32 length = png_read_chunk_header(png_ptr);
 109      png_uint_32 chunk_name = png_ptr->chunk_name;
 110
 111      /* IDAT logic needs to happen here to simplify getting the two flags
 112       * right.
 113       */
 114      if (chunk_name == png_IDAT)
 115      {
 116         if ((png_ptr->mode & PNG_HAVE_IHDR) == 0)
 117            png_chunk_error(png_ptr, "Missing IHDR before IDAT");
 118
 119         else if (png_ptr->color_type == PNG_COLOR_TYPE_PALETTE &&
 120             (png_ptr->mode & PNG_HAVE_PLTE) == 0)
 121            png_chunk_error(png_ptr, "Missing PLTE before IDAT");
 122
 123         else if ((png_ptr->mode & PNG_AFTER_IDAT) != 0)
 124            png_chunk_benign_error(png_ptr, "Too many IDATs found");
 125
 126         png_ptr->mode |= PNG_HAVE_IDAT;
 127      }
 128
 129      else if ((png_ptr->mode & PNG_HAVE_IDAT) != 0)
 130      {
 131         png_ptr->mode |= PNG_HAVE_CHUNK_AFTER_IDAT;
 132         png_ptr->mode |= PNG_AFTER_IDAT;
 133      }
 134
 135      /* This should be a binary subdivision search or a hash for
 136       * matching the chunk name rather than a linear search.
 137       */
 138      if (chunk_name == png_IHDR)
 139         png_handle_IHDR(png_ptr, info_ptr, length);
 140
 141      else if (chunk_name == png_IEND)
 142         png_handle_IEND(png_ptr, info_ptr, length);
 143
 144#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
 145      else if ((keep = png_chunk_unknown_handling(png_ptr, chunk_name)) != 0)
 146      {
 147         png_handle_unknown(png_ptr, info_ptr, length, keep);
 148
 149         if (chunk_name == png_PLTE)
 150            png_ptr->mode |= PNG_HAVE_PLTE;
 151
 152         else if (chunk_name == png_IDAT)
 153         {
 154            png_ptr->idat_size = 0; /* It has been consumed */
 155            break;
 156         }
 157      }
 158#endif
 159      else if (chunk_name == png_PLTE)
 160         png_handle_PLTE(png_ptr, info_ptr, length);
 161
 162      else if (chunk_name == png_IDAT)
 163      {
 164         png_ptr->idat_size = length;
 165         break;
 166      }
 167
 168#ifdef PNG_READ_bKGD_SUPPORTED
 169      else if (chunk_name == png_bKGD)
 170         png_handle_bKGD(png_ptr, info_ptr, length);
 171#endif
 172
 173#ifdef PNG_READ_cHRM_SUPPORTED
 174      else if (chunk_name == png_cHRM)
 175         png_handle_cHRM(png_ptr, info_ptr, length);
 176#endif
 177
 178#ifdef PNG_READ_eXIf_SUPPORTED
 179      else if (chunk_name == png_eXIf)
 180         png_handle_eXIf(png_ptr, info_ptr, length);
 181#endif
 182
 183#ifdef PNG_READ_gAMA_SUPPORTED
 184      else if (chunk_name == png_gAMA)
 185         png_handle_gAMA(png_ptr, info_ptr, length);
 186#endif
 187
 188#ifdef PNG_READ_hIST_SUPPORTED
 189      else if (chunk_name == png_hIST)
 190         png_handle_hIST(png_ptr, info_ptr, length);
 191#endif
 192
 193#ifdef PNG_READ_oFFs_SUPPORTED
 194      else if (chunk_name == png_oFFs)
 195         png_handle_oFFs(png_ptr, info_ptr, length);
 196#endif
 197
 198#ifdef PNG_READ_pCAL_SUPPORTED
 199      else if (chunk_name == png_pCAL)
 200         png_handle_pCAL(png_ptr, info_ptr, length);
 201#endif
 202
 203#ifdef PNG_READ_sCAL_SUPPORTED
 204      else if (chunk_name == png_sCAL)
 205         png_handle_sCAL(png_ptr, info_ptr, length);
 206#endif
 207
 208#ifdef PNG_READ_pHYs_SUPPORTED
 209      else if (chunk_name == png_pHYs)
 210         png_handle_pHYs(png_ptr, info_ptr, length);
 211#endif
 212
 213#ifdef PNG_READ_sBIT_SUPPORTED
 214      else if (chunk_name == png_sBIT)
 215         png_handle_sBIT(png_ptr, info_ptr, length);
 216#endif
 217
 218#ifdef PNG_READ_sRGB_SUPPORTED
 219      else if (chunk_name == png_sRGB)
 220         png_handle_sRGB(png_ptr, info_ptr, length);
 221#endif
 222
 223#ifdef PNG_READ_iCCP_SUPPORTED
 224      else if (chunk_name == png_iCCP)
 225         png_handle_iCCP(png_ptr, info_ptr, length);
 226#endif
 227
 228#ifdef PNG_READ_sPLT_SUPPORTED
 229      else if (chunk_name == png_sPLT)
 230         png_handle_sPLT(png_ptr, info_ptr, length);
 231#endif
 232
 233#ifdef PNG_READ_tEXt_SUPPORTED
 234      else if (chunk_name == png_tEXt)
 235         png_handle_tEXt(png_ptr, info_ptr, length);
 236#endif
 237
 238#ifdef PNG_READ_tIME_SUPPORTED
 239      else if (chunk_name == png_tIME)
 240         png_handle_tIME(png_ptr, info_ptr, length);
 241#endif
 242
 243#ifdef PNG_READ_tRNS_SUPPORTED
 244      else if (chunk_name == png_tRNS)
 245         png_handle_tRNS(png_ptr, info_ptr, length);
 246#endif
 247
 248#ifdef PNG_READ_zTXt_SUPPORTED
 249      else if (chunk_name == png_zTXt)
 250         png_handle_zTXt(png_ptr, info_ptr, length);
 251#endif
 252
 253#ifdef PNG_READ_iTXt_SUPPORTED
 254      else if (chunk_name == png_iTXt)
 255         png_handle_iTXt(png_ptr, info_ptr, length);
 256#endif
 257
 258      else
 259         png_handle_unknown(png_ptr, info_ptr, length,
 260             PNG_HANDLE_CHUNK_AS_DEFAULT);
 261   }
 262}
 263#endif /* SEQUENTIAL_READ */
 264
 265/* Optional call to update the users info_ptr structure */
 266void PNGAPI
 267png_read_update_info(png_structrp png_ptr, png_inforp info_ptr)
 268{
 269   png_debug(1, "in png_read_update_info");
 270
 271   if (png_ptr != NULL)
 272   {
 273      if ((png_ptr->flags & PNG_FLAG_ROW_INIT) == 0)
 274      {
 275         png_read_start_row(png_ptr);
 276
 277#        ifdef PNG_READ_TRANSFORMS_SUPPORTED
 278            png_read_transform_info(png_ptr, info_ptr);
 279#        else
 280            PNG_UNUSED(info_ptr)
 281#        endif
 282      }
 283
 284      /* New in 1.6.0 this avoids the bug of doing the initializations twice */
 285      else
 286         png_app_error(png_ptr,
 287             "png_read_update_info/png_start_read_image: duplicate call");
 288   }
 289}
 290
 291#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
 292/* Initialize palette, background, etc, after transformations
 293 * are set, but before any reading takes place.  This allows
 294 * the user to obtain a gamma-corrected palette, for example.
 295 * If the user doesn't call this, we will do it ourselves.
 296 */
 297void PNGAPI
 298png_start_read_image(png_structrp png_ptr)
 299{
 300   png_debug(1, "in png_start_read_image");
 301
 302   if (png_ptr != NULL)
 303   {
 304      if ((png_ptr->flags & PNG_FLAG_ROW_INIT) == 0)
 305         png_read_start_row(png_ptr);
 306
 307      /* New in 1.6.0 this avoids the bug of doing the initializations twice */
 308      else
 309         png_app_error(png_ptr,
 310             "png_start_read_image/png_read_update_info: duplicate call");
 311   }
 312}
 313#endif /* SEQUENTIAL_READ */
 314
 315#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
 316#ifdef PNG_MNG_FEATURES_SUPPORTED
 317/* Undoes intrapixel differencing,
 318 * NOTE: this is apparently only supported in the 'sequential' reader.
 319 */
 320static void
 321png_do_read_intrapixel(png_row_infop row_info, png_bytep row)
 322{
 323   png_debug(1, "in png_do_read_intrapixel");
 324
 325   if (
 326       (row_info->color_type & PNG_COLOR_MASK_COLOR) != 0)
 327   {
 328      int bytes_per_pixel;
 329      png_uint_32 row_width = row_info->width;
 330
 331      if (row_info->bit_depth == 8)
 332      {
 333         png_bytep rp;
 334         png_uint_32 i;
 335
 336         if (row_info->color_type == PNG_COLOR_TYPE_RGB)
 337            bytes_per_pixel = 3;
 338
 339         else if (row_info->color_type == PNG_COLOR_TYPE_RGB_ALPHA)
 340            bytes_per_pixel = 4;
 341
 342         else
 343            return;
 344
 345         for (i = 0, rp = row; i < row_width; i++, rp += bytes_per_pixel)
 346         {
 347            *(rp) = (png_byte)((256 + *rp + *(rp + 1)) & 0xff);
 348            *(rp+2) = (png_byte)((256 + *(rp + 2) + *(rp + 1)) & 0xff);
 349         }
 350      }
 351      else if (row_info->bit_depth == 16)
 352      {
 353         png_bytep rp;
 354         png_uint_32 i;
 355
 356         if (row_info->color_type == PNG_COLOR_TYPE_RGB)
 357            bytes_per_pixel = 6;
 358
 359         else if (row_info->color_type == PNG_COLOR_TYPE_RGB_ALPHA)
 360            bytes_per_pixel = 8;
 361
 362         else
 363            return;
 364
 365         for (i = 0, rp = row; i < row_width; i++, rp += bytes_per_pixel)
 366         {
 367            png_uint_32 s0   = (png_uint_32)(*(rp    ) << 8) | *(rp + 1);
 368            png_uint_32 s1   = (png_uint_32)(*(rp + 2) << 8) | *(rp + 3);
 369            png_uint_32 s2   = (png_uint_32)(*(rp + 4) << 8) | *(rp + 5);
 370            png_uint_32 red  = (s0 + s1 + 65536) & 0xffff;
 371            png_uint_32 blue = (s2 + s1 + 65536) & 0xffff;
 372            *(rp    ) = (png_byte)((red >> 8) & 0xff);
 373            *(rp + 1) = (png_byte)(red & 0xff);
 374            *(rp + 4) = (png_byte)((blue >> 8) & 0xff);
 375            *(rp + 5) = (png_byte)(blue & 0xff);
 376         }
 377      }
 378   }
 379}
 380#endif /* MNG_FEATURES */
 381
 382void PNGAPI
 383png_read_row(png_structrp png_ptr, png_bytep row, png_bytep dsp_row)
 384{
 385   png_row_info row_info;
 386
 387   if (png_ptr == NULL)
 388      return;
 389
 390   png_debug2(1, "in png_read_row (row %lu, pass %d)",
 391       (unsigned long)png_ptr->row_number, png_ptr->pass);
 392
 393   /* png_read_start_row sets the information (in particular iwidth) for this
 394    * interlace pass.
 395    */
 396   if ((png_ptr->flags & PNG_FLAG_ROW_INIT) == 0)
 397      png_read_start_row(png_ptr);
 398
 399   /* 1.5.6: row_info moved out of png_struct to a local here. */
 400   row_info.width = png_ptr->iwidth; /* NOTE: width of current interlaced row */
 401   row_info.color_type = png_ptr->color_type;
 402   row_info.bit_depth = png_ptr->bit_depth;
 403   row_info.channels = png_ptr->channels;
 404   row_info.pixel_depth = png_ptr->pixel_depth;
 405   row_info.rowbytes = PNG_ROWBYTES(row_info.pixel_depth, row_info.width);
 406
 407#ifdef PNG_WARNINGS_SUPPORTED
 408   if (png_ptr->row_number == 0 && png_ptr->pass == 0)
 409   {
 410   /* Check for transforms that have been set but were defined out */
 411#if defined(PNG_WRITE_INVERT_SUPPORTED) && !defined(PNG_READ_INVERT_SUPPORTED)
 412   if ((png_ptr->transformations & PNG_INVERT_MONO) != 0)
 413      png_warning(png_ptr, "PNG_READ_INVERT_SUPPORTED is not defined");
 414#endif
 415
 416#if defined(PNG_WRITE_FILLER_SUPPORTED) && !defined(PNG_READ_FILLER_SUPPORTED)
 417   if ((png_ptr->transformations & PNG_FILLER) != 0)
 418      png_warning(png_ptr, "PNG_READ_FILLER_SUPPORTED is not defined");
 419#endif
 420
 421#if defined(PNG_WRITE_PACKSWAP_SUPPORTED) && \
 422    !defined(PNG_READ_PACKSWAP_SUPPORTED)
 423   if ((png_ptr->transformations & PNG_PACKSWAP) != 0)
 424      png_warning(png_ptr, "PNG_READ_PACKSWAP_SUPPORTED is not defined");
 425#endif
 426
 427#if defined(PNG_WRITE_PACK_SUPPORTED) && !defined(PNG_READ_PACK_SUPPORTED)
 428   if ((png_ptr->transformations & PNG_PACK) != 0)
 429      png_warning(png_ptr, "PNG_READ_PACK_SUPPORTED is not defined");
 430#endif
 431
 432#if defined(PNG_WRITE_SHIFT_SUPPORTED) && !defined(PNG_READ_SHIFT_SUPPORTED)
 433   if ((png_ptr->transformations & PNG_SHIFT) != 0)
 434      png_warning(png_ptr, "PNG_READ_SHIFT_SUPPORTED is not defined");
 435#endif
 436
 437#if defined(PNG_WRITE_BGR_SUPPORTED) && !defined(PNG_READ_BGR_SUPPORTED)
 438   if ((png_ptr->transformations & PNG_BGR) != 0)
 439      png_warning(png_ptr, "PNG_READ_BGR_SUPPORTED is not defined");
 440#endif
 441
 442#if defined(PNG_WRITE_SWAP_SUPPORTED) && !defined(PNG_READ_SWAP_SUPPORTED)
 443   if ((png_ptr->transformations & PNG_SWAP_BYTES) != 0)
 444      png_warning(png_ptr, "PNG_READ_SWAP_SUPPORTED is not defined");
 445#endif
 446   }
 447#endif /* WARNINGS */
 448
 449#ifdef PNG_READ_INTERLACING_SUPPORTED
 450   /* If interlaced and we do not need a new row, combine row and return.
 451    * Notice that the pixels we have from previous rows have been transformed
 452    * already; we can only combine like with like (transformed or
 453    * untransformed) and, because of the libpng API for interlaced images, this
 454    * means we must transform before de-interlacing.
 455    */
 456   if (png_ptr->interlaced != 0 &&
 457       (png_ptr->transformations & PNG_INTERLACE) != 0)
 458   {
 459      switch (png_ptr->pass)
 460      {
 461         case 0:
 462            if (png_ptr->row_number & 0x07)
 463            {
 464               if (dsp_row != NULL)
 465                  png_combine_row(png_ptr, dsp_row, 1/*display*/);
 466               png_read_finish_row(png_ptr);
 467               return;
 468            }
 469            break;
 470
 471         case 1:
 472            if ((png_ptr->row_number & 0x07) || png_ptr->width < 5)
 473            {
 474               if (dsp_row != NULL)
 475                  png_combine_row(png_ptr, dsp_row, 1/*display*/);
 476
 477               png_read_finish_row(png_ptr);
 478               return;
 479            }
 480            break;
 481
 482         case 2:
 483            if ((png_ptr->row_number & 0x07) != 4)
 484            {
 485               if (dsp_row != NULL && (png_ptr->row_number & 4))
 486                  png_combine_row(png_ptr, dsp_row, 1/*display*/);
 487
 488               png_read_finish_row(png_ptr);
 489               return;
 490            }
 491            break;
 492
 493         case 3:
 494            if ((png_ptr->row_number & 3) || png_ptr->width < 3)
 495            {
 496               if (dsp_row != NULL)
 497                  png_combine_row(png_ptr, dsp_row, 1/*display*/);
 498
 499               png_read_finish_row(png_ptr);
 500               return;
 501            }
 502            break;
 503
 504         case 4:
 505            if ((png_ptr->row_number & 3) != 2)
 506            {
 507               if (dsp_row != NULL && (png_ptr->row_number & 2))
 508                  png_combine_row(png_ptr, dsp_row, 1/*display*/);
 509
 510               png_read_finish_row(png_ptr);
 511               return;
 512            }
 513            break;
 514
 515         case 5:
 516            if ((png_ptr->row_number & 1) || png_ptr->width < 2)
 517            {
 518               if (dsp_row != NULL)
 519                  png_combine_row(png_ptr, dsp_row, 1/*display*/);
 520
 521               png_read_finish_row(png_ptr);
 522               return;
 523            }
 524            break;
 525
 526         default:
 527         case 6:
 528            if ((png_ptr->row_number & 1) == 0)
 529            {
 530               png_read_finish_row(png_ptr);
 531               return;
 532            }
 533            break;
 534      }
 535   }
 536#endif
 537
 538   if ((png_ptr->mode & PNG_HAVE_IDAT) == 0)
 539      png_error(png_ptr, "Invalid attempt to read row data");
 540
 541   /* Fill the row with IDAT data: */
 542   png_ptr->row_buf[0]=255; /* to force error if no data was found */
 543   png_read_IDAT_data(png_ptr, png_ptr->row_buf, row_info.rowbytes + 1);
 544
 545   if (png_ptr->row_buf[0] > PNG_FILTER_VALUE_NONE)
 546   {
 547      if (png_ptr->row_buf[0] < PNG_FILTER_VALUE_LAST)
 548         png_read_filter_row(png_ptr, &row_info, png_ptr->row_buf + 1,
 549             png_ptr->prev_row + 1, png_ptr->row_buf[0]);
 550      else
 551         png_error(png_ptr, "bad adaptive filter value");
 552   }
 553
 554   /* libpng 1.5.6: the following line was copying png_ptr->rowbytes before
 555    * 1.5.6, while the buffer really is this big in current versions of libpng
 556    * it may not be in the future, so this was changed just to copy the
 557    * interlaced count:
 558    */
 559   memcpy(png_ptr->prev_row, png_ptr->row_buf, row_info.rowbytes + 1);
 560
 561#ifdef PNG_MNG_FEATURES_SUPPORTED
 562   if ((png_ptr->mng_features_permitted & PNG_FLAG_MNG_FILTER_64) != 0 &&
 563       (png_ptr->filter_type == PNG_INTRAPIXEL_DIFFERENCING))
 564   {
 565      /* Intrapixel differencing */
 566      png_do_read_intrapixel(&row_info, png_ptr->row_buf + 1);
 567   }
 568#endif
 569
 570#ifdef PNG_READ_TRANSFORMS_SUPPORTED
 571   if (png_ptr->transformations)
 572      png_do_read_transformations(png_ptr, &row_info);
 573#endif
 574
 575   /* The transformed pixel depth should match the depth now in row_info. */
 576   if (png_ptr->transformed_pixel_depth == 0)
 577   {
 578      png_ptr->transformed_pixel_depth = row_info.pixel_depth;
 579      if (row_info.pixel_depth > png_ptr->maximum_pixel_depth)
 580         png_error(png_ptr, "sequential row overflow");
 581   }
 582
 583   else if (png_ptr->transformed_pixel_depth != row_info.pixel_depth)
 584      png_error(png_ptr, "internal sequential row size calculation error");
 585
 586#ifdef PNG_READ_INTERLACING_SUPPORTED
 587   /* Expand interlaced rows to full size */
 588   if (png_ptr->interlaced != 0 &&
 589      (png_ptr->transformations & PNG_INTERLACE) != 0)
 590   {
 591      if (png_ptr->pass < 6)
 592         png_do_read_interlace(&row_info, png_ptr->row_buf + 1, png_ptr->pass,
 593             png_ptr->transformations);
 594
 595      if (dsp_row != NULL)
 596         png_combine_row(png_ptr, dsp_row, 1/*display*/);
 597
 598      if (row != NULL)
 599         png_combine_row(png_ptr, row, 0/*row*/);
 600   }
 601
 602   else
 603#endif
 604   {
 605      if (row != NULL)
 606         png_combine_row(png_ptr, row, -1/*ignored*/);
 607
 608      if (dsp_row != NULL)
 609         png_combine_row(png_ptr, dsp_row, -1/*ignored*/);
 610   }
 611   png_read_finish_row(png_ptr);
 612
 613   if (png_ptr->read_row_fn != NULL)
 614      (*(png_ptr->read_row_fn))(png_ptr, png_ptr->row_number, png_ptr->pass);
 615
 616}
 617#endif /* SEQUENTIAL_READ */
 618
 619#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
 620/* Read one or more rows of image data.  If the image is interlaced,
 621 * and png_set_interlace_handling() has been called, the rows need to
 622 * contain the contents of the rows from the previous pass.  If the
 623 * image has alpha or transparency, and png_handle_alpha()[*] has been
 624 * called, the rows contents must be initialized to the contents of the
 625 * screen.
 626 *
 627 * "row" holds the actual image, and pixels are placed in it
 628 * as they arrive.  If the image is displayed after each pass, it will
 629 * appear to "sparkle" in.  "display_row" can be used to display a
 630 * "chunky" progressive image, with finer detail added as it becomes
 631 * available.  If you do not want this "chunky" display, you may pass
 632 * NULL for display_row.  If you do not want the sparkle display, and
 633 * you have not called png_handle_alpha(), you may pass NULL for rows.
 634 * If you have called png_handle_alpha(), and the image has either an
 635 * alpha channel or a transparency chunk, you must provide a buffer for
 636 * rows.  In this case, you do not have to provide a display_row buffer
 637 * also, but you may.  If the image is not interlaced, or if you have
 638 * not called png_set_interlace_handling(), the display_row buffer will
 639 * be ignored, so pass NULL to it.
 640 *
 641 * [*] png_handle_alpha() does not exist yet, as of this version of libpng
 642 */
 643
 644void PNGAPI
 645png_read_rows(png_structrp png_ptr, png_bytepp row,
 646    png_bytepp display_row, png_uint_32 num_rows)
 647{
 648   png_uint_32 i;
 649   png_bytepp rp;
 650   png_bytepp dp;
 651
 652   png_debug(1, "in png_read_rows");
 653
 654   if (png_ptr == NULL)
 655      return;
 656
 657   rp = row;
 658   dp = display_row;
 659   if (rp != NULL && dp != NULL)
 660      for (i = 0; i < num_rows; i++)
 661      {
 662         png_bytep rptr = *rp++;
 663         png_bytep dptr = *dp++;
 664
 665         png_read_row(png_ptr, rptr, dptr);
 666      }
 667
 668   else if (rp != NULL)
 669      for (i = 0; i < num_rows; i++)
 670      {
 671         png_bytep rptr = *rp;
 672         png_read_row(png_ptr, rptr, NULL);
 673         rp++;
 674      }
 675
 676   else if (dp != NULL)
 677      for (i = 0; i < num_rows; i++)
 678      {
 679         png_bytep dptr = *dp;
 680         png_read_row(png_ptr, NULL, dptr);
 681         dp++;
 682      }
 683}
 684#endif /* SEQUENTIAL_READ */
 685
 686#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
 687/* Read the entire image.  If the image has an alpha channel or a tRNS
 688 * chunk, and you have called png_handle_alpha()[*], you will need to
 689 * initialize the image to the current image that PNG will be overlaying.
 690 * We set the num_rows again here, in case it was incorrectly set in
 691 * png_read_start_row() by a call to png_read_update_info() or
 692 * png_start_read_image() if png_set_interlace_handling() wasn't called
 693 * prior to either of these functions like it should have been.  You can
 694 * only call this function once.  If you desire to have an image for
 695 * each pass of a interlaced image, use png_read_rows() instead.
 696 *
 697 * [*] png_handle_alpha() does not exist yet, as of this version of libpng
 698 */
 699void PNGAPI
 700png_read_image(png_structrp png_ptr, png_bytepp image)
 701{
 702   png_uint_32 i, image_height;
 703   int pass, j;
 704   png_bytepp rp;
 705
 706   png_debug(1, "in png_read_image");
 707
 708   if (png_ptr == NULL)
 709      return;
 710
 711#ifdef PNG_READ_INTERLACING_SUPPORTED
 712   if ((png_ptr->flags & PNG_FLAG_ROW_INIT) == 0)
 713   {
 714      pass = png_set_interlace_handling(png_ptr);
 715      /* And make sure transforms are initialized. */
 716      png_start_read_image(png_ptr);
 717   }
 718   else
 719   {
 720      if (png_ptr->interlaced != 0 &&
 721          (png_ptr->transformations & PNG_INTERLACE) == 0)
 722      {
 723         /* Caller called png_start_read_image or png_read_update_info without
 724          * first turning on the PNG_INTERLACE transform.  We can fix this here,
 725          * but the caller should do it!
 726          */
 727         png_warning(png_ptr, "Interlace handling should be turned on when "
 728             "using png_read_image");
 729         /* Make sure this is set correctly */
 730         png_ptr->num_rows = png_ptr->height;
 731      }
 732
 733      /* Obtain the pass number, which also turns on the PNG_INTERLACE flag in
 734       * the above error case.
 735       */
 736      pass = png_set_interlace_handling(png_ptr);
 737   }
 738#else
 739   if (png_ptr->interlaced)
 740      png_error(png_ptr,
 741          "Cannot read interlaced image -- interlace handler disabled");
 742
 743   pass = 1;
 744#endif
 745
 746   image_height=png_ptr->height;
 747
 748   for (j = 0; j < pass; j++)
 749   {
 750      rp = image;
 751      for (i = 0; i < image_height; i++)
 752      {
 753         png_read_row(png_ptr, *rp, NULL);
 754         rp++;
 755      }
 756   }
 757}
 758#endif /* SEQUENTIAL_READ */
 759
 760#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
 761/* Read the end of the PNG file.  Will not read past the end of the
 762 * file, will verify the end is accurate, and will read any comments
 763 * or time information at the end of the file, if info is not NULL.
 764 */
 765void PNGAPI
 766png_read_end(png_structrp png_ptr, png_inforp info_ptr)
 767{
 768#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
 769   int keep;
 770#endif
 771
 772   png_debug(1, "in png_read_end");
 773
 774   if (png_ptr == NULL)
 775      return;
 776
 777   /* If png_read_end is called in the middle of reading the rows there may
 778    * still be pending IDAT data and an owned zstream.  Deal with this here.
 779    */
 780#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
 781   if (png_chunk_unknown_handling(png_ptr, png_IDAT) == 0)
 782#endif
 783      png_read_finish_IDAT(png_ptr);
 784
 785#ifdef PNG_READ_CHECK_FOR_INVALID_INDEX_SUPPORTED
 786   /* Report invalid palette index; added at libng-1.5.10 */
 787   if (png_ptr->color_type == PNG_COLOR_TYPE_PALETTE &&
 788       png_ptr->num_palette_max > png_ptr->num_palette)
 789      png_benign_error(png_ptr, "Read palette index exceeding num_palette");
 790#endif
 791
 792   do
 793   {
 794      png_uint_32 length = png_read_chunk_header(png_ptr);
 795      png_uint_32 chunk_name = png_ptr->chunk_name;
 796
 797      if (chunk_name != png_IDAT)
 798         png_ptr->mode |= PNG_HAVE_CHUNK_AFTER_IDAT;
 799
 800      if (chunk_name == png_IEND)
 801         png_handle_IEND(png_ptr, info_ptr, length);
 802
 803      else if (chunk_name == png_IHDR)
 804         png_handle_IHDR(png_ptr, info_ptr, length);
 805
 806      else if (info_ptr == NULL)
 807         png_crc_finish(png_ptr, length);
 808
 809#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
 810      else if ((keep = png_chunk_unknown_handling(png_ptr, chunk_name)) != 0)
 811      {
 812         if (chunk_name == png_IDAT)
 813         {
 814            if ((length > 0 && !(png_ptr->flags & PNG_FLAG_ZSTREAM_ENDED))
 815                || (png_ptr->mode & PNG_HAVE_CHUNK_AFTER_IDAT) != 0)
 816               png_benign_error(png_ptr, ".Too many IDATs found");
 817         }
 818         png_handle_unknown(png_ptr, info_ptr, length, keep);
 819         if (chunk_name == png_PLTE)
 820            png_ptr->mode |= PNG_HAVE_PLTE;
 821      }
 822#endif
 823
 824      else if (chunk_name == png_IDAT)
 825      {
 826         /* Zero length IDATs are legal after the last IDAT has been
 827          * read, but not after other chunks have been read.  1.6 does not
 828          * always read all the deflate data; specifically it cannot be relied
 829          * upon to read the Adler32 at the end.  If it doesn't ignore IDAT
 830          * chunks which are longer than zero as well:
 831          */
 832         if ((length > 0 && !(png_ptr->flags & PNG_FLAG_ZSTREAM_ENDED))
 833             || (png_ptr->mode & PNG_HAVE_CHUNK_AFTER_IDAT) != 0)
 834            png_benign_error(png_ptr, "..Too many IDATs found");
 835
 836         png_crc_finish(png_ptr, length);
 837      }
 838      else if (chunk_name == png_PLTE)
 839         png_handle_PLTE(png_ptr, info_ptr, length);
 840
 841#ifdef PNG_READ_bKGD_SUPPORTED
 842      else if (chunk_name == png_bKGD)
 843         png_handle_bKGD(png_ptr, info_ptr, length);
 844#endif
 845
 846#ifdef PNG_READ_cHRM_SUPPORTED
 847      else if (chunk_name == png_cHRM)
 848         png_handle_cHRM(png_ptr, info_ptr, length);
 849#endif
 850
 851#ifdef PNG_READ_eXIf_SUPPORTED
 852      else if (chunk_name == png_eXIf)
 853         png_handle_eXIf(png_ptr, info_ptr, length);
 854#endif
 855
 856#ifdef PNG_READ_gAMA_SUPPORTED
 857      else if (chunk_name == png_gAMA)
 858         png_handle_gAMA(png_ptr, info_ptr, length);
 859#endif
 860
 861#ifdef PNG_READ_hIST_SUPPORTED
 862      else if (chunk_name == png_hIST)
 863         png_handle_hIST(png_ptr, info_ptr, length);
 864#endif
 865
 866#ifdef PNG_READ_oFFs_SUPPORTED
 867      else if (chunk_name == png_oFFs)
 868         png_handle_oFFs(png_ptr, info_ptr, length);
 869#endif
 870
 871#ifdef PNG_READ_pCAL_SUPPORTED
 872      else if (chunk_name == png_pCAL)
 873         png_handle_pCAL(png_ptr, info_ptr, length);
 874#endif
 875
 876#ifdef PNG_READ_sCAL_SUPPORTED
 877      else if (chunk_name == png_sCAL)
 878         png_handle_sCAL(png_ptr, info_ptr, length);
 879#endif
 880
 881#ifdef PNG_READ_pHYs_SUPPORTED
 882      else if (chunk_name == png_pHYs)
 883         png_handle_pHYs(png_ptr, info_ptr, length);
 884#endif
 885
 886#ifdef PNG_READ_sBIT_SUPPORTED
 887      else if (chunk_name == png_sBIT)
 888         png_handle_sBIT(png_ptr, info_ptr, length);
 889#endif
 890
 891#ifdef PNG_READ_sRGB_SUPPORTED
 892      else if (chunk_name == png_sRGB)
 893         png_handle_sRGB(png_ptr, info_ptr, length);
 894#endif
 895
 896#ifdef PNG_READ_iCCP_SUPPORTED
 897      else if (chunk_name == png_iCCP)
 898         png_handle_iCCP(png_ptr, info_ptr, length);
 899#endif
 900
 901#ifdef PNG_READ_sPLT_SUPPORTED
 902      else if (chunk_name == png_sPLT)
 903         png_handle_sPLT(png_ptr, info_ptr, length);
 904#endif
 905
 906#ifdef PNG_READ_tEXt_SUPPORTED
 907      else if (chunk_name == png_tEXt)
 908         png_handle_tEXt(png_ptr, info_ptr, length);
 909#endif
 910
 911#ifdef PNG_READ_tIME_SUPPORTED
 912      else if (chunk_name == png_tIME)
 913         png_handle_tIME(png_ptr, info_ptr, length);
 914#endif
 915
 916#ifdef PNG_READ_tRNS_SUPPORTED
 917      else if (chunk_name == png_tRNS)
 918         png_handle_tRNS(png_ptr, info_ptr, length);
 919#endif
 920
 921#ifdef PNG_READ_zTXt_SUPPORTED
 922      else if (chunk_name == png_zTXt)
 923         png_handle_zTXt(png_ptr, info_ptr, length);
 924#endif
 925
 926#ifdef PNG_READ_iTXt_SUPPORTED
 927      else if (chunk_name == png_iTXt)
 928         png_handle_iTXt(png_ptr, info_ptr, length);
 929#endif
 930
 931      else
 932         png_handle_unknown(png_ptr, info_ptr, length,
 933             PNG_HANDLE_CHUNK_AS_DEFAULT);
 934   } while ((png_ptr->mode & PNG_HAVE_IEND) == 0);
 935}
 936#endif /* SEQUENTIAL_READ */
 937
 938/* Free all memory used in the read struct */
 939static void
 940png_read_destroy(png_structrp png_ptr)
 941{
 942   png_debug(1, "in png_read_destroy");
 943
 944#ifdef PNG_READ_GAMMA_SUPPORTED
 945   png_destroy_gamma_table(png_ptr);
 946#endif
 947
 948   png_free(png_ptr, png_ptr->big_row_buf);
 949   png_ptr->big_row_buf = NULL;
 950   png_free(png_ptr, png_ptr->big_prev_row);
 951   png_ptr->big_prev_row = NULL;
 952   png_free(png_ptr, png_ptr->read_buffer);
 953   png_ptr->read_buffer = NULL;
 954
 955#ifdef PNG_READ_QUANTIZE_SUPPORTED
 956   png_free(png_ptr, png_ptr->palette_lookup);
 957   png_ptr->palette_lookup = NULL;
 958   png_free(png_ptr, png_ptr->quantize_index);
 959   png_ptr->quantize_index = NULL;
 960#endif
 961
 962   if ((png_ptr->free_me & PNG_FREE_PLTE) != 0)
 963   {
 964      png_zfree(png_ptr, png_ptr->palette);
 965      png_ptr->palette = NULL;
 966   }
 967   png_ptr->free_me &= ~PNG_FREE_PLTE;
 968
 969#if defined(PNG_tRNS_SUPPORTED) || \
 970    defined(PNG_READ_EXPAND_SUPPORTED) || defined(PNG_READ_BACKGROUND_SUPPORTED)
 971   if ((png_ptr->free_me & PNG_FREE_TRNS) != 0)
 972   {
 973      png_free(png_ptr, png_ptr->trans_alpha);
 974      png_ptr->trans_alpha = NULL;
 975   }
 976   png_ptr->free_me &= ~PNG_FREE_TRNS;
 977#endif
 978
 979   inflateEnd(&png_ptr->zstream);
 980
 981#ifdef PNG_PROGRESSIVE_READ_SUPPORTED
 982   png_free(png_ptr, png_ptr->save_buffer);
 983   png_ptr->save_buffer = NULL;
 984#endif
 985
 986#if defined(PNG_STORE_UNKNOWN_CHUNKS_SUPPORTED) && \
 987   defined(PNG_READ_UNKNOWN_CHUNKS_SUPPORTED)
 988   png_free(png_ptr, png_ptr->unknown_chunk.data);
 989   png_ptr->unknown_chunk.data = NULL;
 990#endif
 991
 992#ifdef PNG_SET_UNKNOWN_CHUNKS_SUPPORTED
 993   png_free(png_ptr, png_ptr->chunk_list);
 994   png_ptr->chunk_list = NULL;
 995#endif
 996
 997   /* NOTE: the 'setjmp' buffer may still be allocated and the memory and error
 998    * callbacks are still set at this point.  They are required to complete the
 999    * destruction of the png_struct itself.
1000    */
1001}
1002
1003/* Free all memory used by the read */
1004void PNGAPI
1005png_destroy_read_struct(png_structpp png_ptr_ptr, png_infopp info_ptr_ptr,
1006    png_infopp end_info_ptr_ptr)
1007{
1008   png_structrp png_ptr = NULL;
1009
1010   png_debug(1, "in png_destroy_read_struct");
1011
1012   if (png_ptr_ptr != NULL)
1013      png_ptr = *png_ptr_ptr;
1014
1015   if (png_ptr == NULL)
1016      return;
1017
1018   /* libpng 1.6.0: use the API to destroy info structs to ensure consistent
1019    * behavior.  Prior to 1.6.0 libpng did extra 'info' destruction in this API.
1020    * The extra was, apparently, unnecessary yet this hides memory leak bugs.
1021    */
1022   png_destroy_info_struct(png_ptr, end_info_ptr_ptr);
1023   png_destroy_info_struct(png_ptr, info_ptr_ptr);
1024
1025   *png_ptr_ptr = NULL;
1026   png_read_destroy(png_ptr);
1027   png_destroy_png_struct(png_ptr);
1028}
1029
1030void PNGAPI
1031png_set_read_status_fn(png_structrp png_ptr, png_read_status_ptr read_row_fn)
1032{
1033   if (png_ptr == NULL)
1034      return;
1035
1036   png_ptr->read_row_fn = read_row_fn;
1037}
1038
1039
1040#ifdef PNG_SEQUENTIAL_READ_SUPPORTED
1041#ifdef PNG_INFO_IMAGE_SUPPORTED
1042void PNGAPI
1043png_read_png(png_structrp png_ptr, png_inforp info_ptr,
1044    int transforms, voidp params)
1045{
1046   if (png_ptr == NULL || info_ptr == NULL)
1047      return;
1048
1049   /* png_read_info() gives us all of the information from the
1050    * PNG file before the first IDAT (image data chunk).
1051    */
1052   png_read_info(png_ptr, info_ptr);
1053   if (info_ptr->height > PNG_UINT_32_MAX/(sizeof (png_bytep)))
1054      png_error(png_ptr, "Image is too high to process with png_read_png()");
1055
1056   /* -------------- image transformations start here ------------------- */
1057   /* libpng 1.6.10: add code to cause a png_app_error if a selected TRANSFORM
1058    * is not implemented.  This will only happen in de-configured (non-default)
1059    * libpng builds.  The results can be unexpected - png_read_png may return
1060    * short or mal-formed rows because the transform is skipped.
1061    */
1062
1063   /* Tell libpng to strip 16-bit/color files down to 8 bits per color.
1064    */
1065   if ((transforms & PNG_TRANSFORM_SCALE_16) != 0)
1066      /* Added at libpng-1.5.4. "strip_16" produces the same result that it
1067       * did in earlier versions, while "scale_16" is now more accurate.
1068       */
1069#ifdef PNG_READ_SCALE_16_TO_8_SUPPORTED
1070      png_set_scale_16(png_ptr);
1071#else
1072      png_app_error(png_ptr, "PNG_TRANSFORM_SCALE_16 not supported");
1073#endif
1074
1075   /* If both SCALE and STRIP are required pngrtran will effectively cancel the
1076    * latter by doing SCALE first.  This is ok and allows apps not to check for
1077    * which is supported to get the right answer.
1078    */
1079   if ((transforms & PNG_TRANSFORM_STRIP_16) != 0)
1080#ifdef PNG_READ_STRIP_16_TO_8_SUPPORTED
1081      png_set_strip_16(png_ptr);
1082#else
1083      png_app_error(png_ptr, "PNG_TRANSFORM_STRIP_16 not supported");
1084#endif
1085
1086   /* Strip alpha bytes from the input data without combining with
1087    * the background (not recommended).
1088    */
1089   if ((transforms & PNG_TRANSFORM_STRIP_ALPHA) != 0)
1090#ifdef PNG_READ_STRIP_ALPHA_SUPPORTED
1091      png_set_strip_alpha(png_ptr);
1092#else
1093      png_app_error(png_ptr, "PNG_TRANSFORM_STRIP_ALPHA not supported");
1094#endif
1095
1096   /* Extract multiple pixels with bit depths of 1, 2, or 4 from a single
1097    * byte into separate bytes (useful for paletted and grayscale images).
1098    */
1099   if ((transforms & PNG_TRANSFORM_PACKING) != 0)
1100#ifdef PNG_READ_PACK_SUPPORTED
1101      png_set_packing(png_ptr);
1102#else
1103      png_app_error(png_ptr, "PNG_TRANSFORM_PACKING not supported");
1104#endif
1105
1106   /* Change the order of packed pixels to least significant bit first
1107    * (not useful if you are using png_set_packing).
1108    */
1109   if ((transforms & PNG_TRANSFORM_PACKSWAP) != 0)
1110#ifdef PNG_READ_PACKSWAP_SUPPORTED
1111      png_set_packswap(png_ptr);
1112#else
1113      png_app_error(png_ptr, "PNG_TRANSFORM_PACKSWAP not supported");
1114#endif
1115
1116   /* Expand paletted colors into true RGB triplets
1117    * Expand grayscale images to full 8 bits from 1, 2, or 4 bits/pixel
1118    * Expand paletted or RGB images with transparency to full alpha
1119    * channels so the data will be available as RGBA quartets.
1120    */
1121   if ((transforms & PNG_TRANSFORM_EXPAND) != 0)
1122#ifdef PNG_READ_EXPAND_SUPPORTED
1123      png_set_expand(png_ptr);
1124#else
1125      png_app_error(png_ptr, "PNG_TRANSFORM_EXPAND not supported");
1126#endif
1127
1128   /* We don't handle background color or gamma transformation or quantizing.
1129    */
1130
1131   /* Invert monochrome files to have 0 as white and 1 as black
1132    */
1133   if ((transforms & PNG_TRANSFORM_INVERT_MONO) != 0)
1134#ifdef PNG_READ_INVERT_SUPPORTED
1135      png_set_invert_mono(png_ptr);
1136#else
1137      png_app_error(png_ptr, "PNG_TRANSFORM_INVERT_MONO not supported");
1138#endif
1139
1140   /* If you want to shift the pixel values from the range [0,255] or
1141    * [0,65535] to the original [0,7] or [0,31], or whatever range the
1142    * colors were originally in:
1143    */
1144   if ((transforms & PNG_TRANSFORM_SHIFT) != 0)
1145#ifdef PNG_READ_SHIFT_SUPPORTED
1146      if ((info_ptr->valid & PNG_INFO_sBIT) != 0)
1147         png_set_shift(png_ptr, &info_ptr->sig_bit);
1148#else
1149      png_app_error(png_ptr, "PNG_TRANSFORM_SHIFT not supported");
1150#endif
1151
1152   /* Flip the RGB pixels to BGR (or RGBA to BGRA) */
1153   if ((transforms & PNG_TRANSFORM_BGR) != 0)
1154#ifdef PNG_READ_BGR_SUPPORTED
1155      png_set_bgr(png_ptr);
1156#else
1157      png_app_error(png_ptr, "PNG_TRANSFORM_BGR not supported");
1158#endif
1159
1160   /* Swap the RGBA or GA data to ARGB or AG (or BGRA to ABGR) */
1161   if ((transforms & PNG_TRANSFORM_SWAP_ALPHA) != 0)
1162#ifdef PNG_READ_SWAP_ALPHA_SUPPORTED
1163      png_set_swap_alpha(png_ptr);
1164#else
1165      png_app_error(png_ptr, "PNG_TRANSFORM_SWAP_ALPHA not supported");
1166#endif
1167
1168   /* Swap bytes of 16-bit files to least significant byte first */
1169   if ((transforms & PNG_TRANSFORM_SWAP_ENDIAN) != 0)
1170#ifdef PNG_READ_SWAP_SUPPORTED
1171      png_set_swap(png_ptr);
1172#else
1173      png_app_error(png_ptr, "PNG_TRANSFORM_SWAP_ENDIAN not supported");
1174#endif
1175
1176/* Added at libpng-1.2.41 */
1177   /* Invert the alpha channel from opacity to transparency */
1178   if ((transforms & PNG_TRANSFORM_INVERT_ALPHA) != 0)
1179#ifdef PNG_READ_INVERT_ALPHA_SUPPORTED
1180      png_set_invert_alpha(png_ptr);
1181#else
1182      png_app_error(png_ptr, "PNG_TRANSFORM_INVERT_ALPHA not supported");
1183#endif
1184
1185/* Added at libpng-1.2.41 */
1186   /* Expand grayscale image to RGB */
1187   if ((transforms & PNG_TRANSFORM_GRAY_TO_RGB) != 0)
1188#ifdef PNG_READ_GRAY_TO_RGB_SUPPORTED
1189      png_set_gray_to_rgb(png_ptr);
1190#else
1191      png_app_error(png_ptr, "PNG_TRANSFORM_GRAY_TO_RGB not supported");
1192#endif
1193
1194/* Added at libpng-1.5.4 */
1195   if ((transforms & PNG_TRANSFORM_EXPAND_16) != 0)
1196#ifdef PNG_READ_EXPAND_16_SUPPORTED
1197      png_set_expand_16(png_ptr);
1198#else
1199      png_app_error(png_ptr, "PNG_TRANSFORM_EXPAND_16 not supported");
1200#endif
1201
1202   /* We don't handle adding filler bytes */
1203
1204   /* We use png_read_image and rely on that for interlace handling, but we also
1205    * call png_read_update_info therefore must turn on interlace handling now:
1206    */
1207   (void)png_set_interlace_handling(png_ptr);
1208
1209   /* Optional call to gamma correct and add the background to the palette
1210    * and update info structure.  REQUIRED if you are expecting libpng to
1211    * update the palette for you (i.e., you selected such a transform above).
1212    */
1213   png_read_update_info(png_ptr, info_ptr);
1214
1215   /* -------------- image transformations end here ------------------- */
1216
1217   png_free_data(png_ptr, info_ptr, PNG_FREE_ROWS, 0);
1218   if (info_ptr->row_pointers == NULL)
1219   {
1220      png_uint_32 iptr;
1221
1222      info_ptr->row_pointers = png_voidcast(png_bytepp, png_malloc(png_ptr,
1223          info_ptr->height * (sizeof (png_bytep))));
1224
1225      for (iptr=0; iptr<info_ptr->height; iptr++)
1226         info_ptr->row_pointers[iptr] = NULL;
1227
1228      info_ptr->free_me |= PNG_FREE_ROWS;
1229
1230      for (iptr = 0; iptr < info_ptr->height; iptr++)
1231         info_ptr->row_pointers[iptr] = png_voidcast(png_bytep,
1232             png_malloc(png_ptr, info_ptr->rowbytes));
1233   }
1234
1235   png_read_image(png_ptr, info_ptr->row_pointers);
1236   info_ptr->valid |= PNG_INFO_IDAT;
1237
1238   /* Read rest of file, and get additional chunks in info_ptr - REQUIRED */
1239   png_read_end(png_ptr, info_ptr);
1240
1241   PNG_UNUSED(params)
1242}
1243#endif /* INFO_IMAGE */
1244#endif /* SEQUENTIAL_READ */
1245
1246#ifdef PNG_SIMPLIFIED_READ_SUPPORTED
1247/* SIMPLIFIED READ
1248 *
1249 * This code currently relies on the sequential reader, though it could easily
1250 * be made to work with the progressive one.
1251 */
1252/* Arguments to png_image_finish_read: */
1253
1254/* Encoding of PNG data (used by the color-map code) */
1255#  define P_NOTSET  0 /* File encoding not yet known */
1256#  define P_sRGB    1 /* 8-bit encoded to sRGB gamma */
1257#  define P_LINEAR  2 /* 16-bit linear: not encoded, NOT pre-multiplied! */
1258#  define P_FILE    3 /* 8-bit encoded to file gamma, not sRGB or linear */
1259#  define P_LINEAR8 4 /* 8-bit linear: only from a file value */
1260
1261/* Color-map processing: after libpng has run on the PNG image further
1262 * processing may be needed to convert the data to color-map indices.
1263 */
1264#define PNG_CMAP_NONE      0
1265#define PNG_CMAP_GA        1 /* Process GA data to a color-map with alpha */
1266#define PNG_CMAP_TRANS     2 /* Process GA data to a background index */
1267#define PNG_CMAP_RGB       3 /* Process RGB data */
1268#define PNG_CMAP_RGB_ALPHA 4 /* Process RGBA data */
1269
1270/* The following document where the background is for each processing case. */
1271#define PNG_CMAP_NONE_BACKGROUND      256
1272#define PNG_CMAP_GA_BACKGROUND        231
1273#define PNG_CMAP_TRANS_BACKGROUND     254
1274#define PNG_CMAP_RGB_BACKGROUND       256
1275#define PNG_CMAP_RGB_ALPHA_BACKGROUND 216
1276
1277typedef struct
1278{
1279   /* Arguments: */
1280   png_imagep image;
1281   png_voidp  buffer;
1282   png_int_32 row_stride;
1283   png_voidp  colormap;
1284   png_const_colorp background;
1285   /* Local variables: */
1286   png_voidp       local_row;
1287   png_voidp       first_row;
1288   ptrdiff_t       row_bytes;           /* step between rows */
1289   int             file_encoding;       /* E_ values above */
1290   png_fixed_point gamma_to_linear;     /* For P_FILE, reciprocal of gamma */
1291   int             colormap_processing; /* PNG_CMAP_ values above */
1292} png_image_read_control;
1293
1294/* Do all the *safe* initialization - 'safe' means that png_error won't be
1295 * called, so setting up the jmp_buf is not required.  This means that anything
1296 * called from here must *not* call png_malloc - it has to call png_malloc_warn
1297 * instead so that control is returned safely back to this routine.
1298 */
1299static int
1300png_image_read_init(png_imagep image)
1301{
1302   if (image->opaque == NULL)
1303   {
1304      png_structp png_ptr = png_create_read_struct(PNG_LIBPNG_VER_STRING, image,
1305          png_safe_error, png_safe_warning);
1306
1307      /* And set the rest of the structure to NULL to ensure that the various
1308       * fields are consistent.
1309       */
1310      memset(image, 0, (sizeof *image));
1311      image->version = PNG_IMAGE_VERSION;
1312
1313      if (png_ptr != NULL)
1314      {
1315         png_infop info_ptr = png_create_info_struct(png_ptr);
1316
1317         if (info_ptr != NULL)
1318         {
1319            png_controlp control = png_voidcast(png_controlp,
1320                png_malloc_warn(png_ptr, (sizeof *control)));
1321
1322            if (control != NULL)
1323            {
1324               memset(control, 0, (sizeof *control));
1325
1326               control->png_ptr = png_ptr;
1327               control->info_ptr = info_ptr;
1328               control->for_write = 0;
1329
1330               image->opaque = control;
1331               return 1;
1332            }
1333
1334            /* Error clean up */
1335            png_destroy_info_struct(png_ptr, &info_ptr);
1336         }
1337
1338         png_destroy_read_struct(&png_ptr, NULL, NULL);
1339      }
1340
1341      return png_image_error(image, "png_image_read: out of memory");
1342   }
1343
1344   return png_image_error(image, "png_image_read: opaque pointer not NULL");
1345}
1346
1347/* Utility to find the base format of a PNG file from a png_struct. */
1348static png_uint_32
1349png_image_format(png_structrp png_ptr)
1350{
1351   png_uint_32 format = 0;
1352
1353   if ((png_ptr->color_type & PNG_COLOR_MASK_COLOR) != 0)
1354      format |= PNG_FORMAT_FLAG_COLOR;
1355
1356   if ((png_ptr->color_type & PNG_COLOR_MASK_ALPHA) != 0)
1357      format |= PNG_FORMAT_FLAG_ALPHA;
1358
1359   /* Use png_ptr here, not info_ptr, because by examination png_handle_tRNS
1360    * sets the png_struct fields; that's all we are interested in here.  The
1361    * precise interaction with an app call to png_set_tRNS and PNG file reading
1362    * is unclear.
1363    */
1364   else if (png_ptr->num_trans > 0)
1365      format |= PNG_FORMAT_FLAG_ALPHA;
1366
1367   if (png_ptr->bit_depth == 16)
1368      format |= PNG_FORMAT_FLAG_LINEAR;
1369
1370   if ((png_ptr->color_type & PNG_COLOR_MASK_PALETTE) != 0)
1371      format |= PNG_FORMAT_FLAG_COLORMAP;
1372
1373   return format;
1374}
1375
1376/* Is the given gamma significantly different from sRGB?  The test is the same
1377 * one used in pngrtran.c when deciding whether to do gamma correction.  The
1378 * arithmetic optimizes the division by using the fact that the inverse of the
1379 * file sRGB gamma is 2.2
1380 */
1381static int
1382png_gamma_not_sRGB(png_fixed_point g)
1383{
1384   if (g < PNG_FP_1)
1385   {
1386      /* An uninitialized gamma is assumed to be sRGB for the simplified API. */
1387      if (g == 0)
1388         return 0;
1389
1390      return png_gamma_significant((g * 11 + 2)/5 /* i.e. *2.2, rounded */);
1391   }
1392
1393   return 1;
1394}
1395
1396/* Do the main body of a 'png_image_begin_read' function; read the PNG file
1397 * header and fill in all the information.  This is executed in a safe context,
1398 * unlike the init routine above.
1399 */
1400static int
1401png_image_read_header(png_voidp argument)
1402{
1403   png_imagep image = png_voidcast(png_imagep, argument);
1404   png_structrp png_ptr = image->opaque->png_ptr;
1405   png_inforp info_ptr = image->opaque->info_ptr;
1406
1407#ifdef PNG_BENIGN_ERRORS_SUPPORTED
1408   png_set_benign_errors(png_ptr, 1/*warn*/);
1409#endif
1410   png_read_info(png_ptr, info_ptr);
1411
1412   /* Do this the fast way; just read directly out of png_struct. */
1413   image->width = png_ptr->width;
1414   image->height = png_ptr->height;
1415
1416   {
1417      png_uint_32 format = png_image_format(png_ptr);
1418
1419      image->format = format;
1420
1421#ifdef PNG_COLORSPACE_SUPPORTED
1422      /* Does the colorspace match sRGB?  If there is no color endpoint
1423       * (colorant) information assume yes, otherwise require the
1424       * 'ENDPOINTS_MATCHP_sRGB' colorspace flag to have been set.  If the
1425       * colorspace has been determined to be invalid ignore it.
1426       */
1427      if ((format & PNG_FORMAT_FLAG_COLOR) != 0 && ((png_ptr->colorspace.flags
1428         & (PNG_COLORSPACE_HAVE_ENDPOINTS|PNG_COLORSPACE_ENDPOINTS_MATCH_sRGB|
1429            PNG_COLORSPACE_INVALID)) == PNG_COLORSPACE_HAVE_ENDPOINTS))
1430         image->flags |= PNG_IMAGE_FLAG_COLORSPACE_NOT_sRGB;
1431#endif
1432   }
1433
1434   /* We need the maximum number of entries regardless of the format the
1435    * application sets here.
1436    */
1437   {
1438      png_uint_32 cmap_entries;
1439
1440      switch (png_ptr->color_type)
1441      {
1442         case PNG_COLOR_TYPE_GRAY:
1443            cmap_entries = 1U << png_ptr->bit_depth;
1444            break;
1445
1446         case PNG_COLOR_TYPE_PALETTE:
1447            cmap_entries = (png_uint_32)png_ptr->num_palette;
1448            break;
1449
1450         default:
1451            cmap_entries = 256;
1452            break;
1453      }
1454
1455      if (cmap_entries > 256)
1456         cmap_entries = 256;
1457
1458      image->colormap_entries = cmap_entries;
1459   }
1460
1461   return 1;
1462}
1463
1464#ifdef PNG_STDIO_SUPPORTED
1465int PNGAPI
1466png_image_begin_read_from_stdio(png_imagep image, FILE* file)
1467{
1468   if (image != NULL && image->version == PNG_IMAGE_VERSION)
1469   {
1470      if (file != NULL)
1471      {
1472         if (png_image_read_init(image) != 0)
1473         {
1474            /* This is slightly evil, but png_init_io doesn't do anything other
1475             * than this and we haven't changed the standard IO functions so
1476             * this saves a 'safe' function.
1477             */
1478            image->opaque->png_ptr->io_ptr = file;
1479            return png_safe_execute(image, png_image_read_header, image);
1480         }
1481      }
1482
1483      else
1484         return png_image_error(image,
1485             "png_image_begin_read_from_stdio: invalid argument");
1486   }
1487
1488   else if (image != NULL)
1489      return png_image_error(image,
1490          "png_image_begin_read_from_stdio: incorrect PNG_IMAGE_VERSION");
1491
1492   return 0;
1493}
1494
1495int PNGAPI
1496png_image_begin_read_from_file(png_imagep image, const char *file_name)
1497{
1498   if (image != NULL && image->version == PNG_IMAGE_VERSION)
1499   {
1500      if (file_name != NULL)
1501      {
1502         FILE *fp = fopen(file_name, "rb");
1503
1504         if (fp != NULL)
1505         {
1506            if (png_image_read_init(image) != 0)
1507            {
1508               image->opaque->png_ptr->io_ptr = fp;
1509               image->opaque->owned_file = 1;
1510               return png_safe_execute(image, png_image_read_header, image);
1511            }
1512
1513            /* Clean up: just the opened file. */
1514            (void)fclose(fp);
1515         }
1516
1517         else
1518            return png_image_error(image, strerror(errno));
1519      }
1520
1521      else
1522         return png_image_error(image,
1523             "png_image_begin_read_from_file: invalid argument");
1524   }
1525
1526   else if (image != NULL)
1527      return png_image_error(image,
1528          "png_image_begin_read_from_file: incorrect PNG_IMAGE_VERSION");
1529
1530   return 0;
1531}
1532#endif /* STDIO */
1533
1534static void PNGCBAPI
1535png_image_memory_read(png_structp png_ptr, png_bytep out, png_size_t need)
1536{
1537   if (png_ptr != NULL)
1538   {
1539      png_imagep image = png_voidcast(png_imagep, png_ptr->io_ptr);
1540      if (image != NULL)
1541      {
1542         png_controlp cp = image->opaque;
1543         if (cp != NULL)
1544         {
1545            png_const_bytep memory = cp->memory;
1546            png_size_t size = cp->size;
1547
1548            if (memory != NULL && size >= need)
1549            {
1550               memcpy(out, memory, need);
1551               cp->memory = memory + need;
1552               cp->size = size - need;
1553               return;
1554            }
1555
1556            png_error(png_ptr, "read beyond end of data");
1557         }
1558      }
1559
1560      png_error(png_ptr, "invalid memory read");
1561   }
1562}
1563
1564int PNGAPI png_image_begin_read_from_memory(png_imagep image,
1565    png_const_voidp memory, png_size_t size)
1566{
1567   if (image != NULL && image->version == PNG_IMAGE_VERSION)
1568   {
1569      if (memory != NULL && size > 0)
1570      {
1571         if (png_image_read_init(image) != 0)
1572         {
1573            /* Now set the IO functions to read from the memory buffer and
1574             * store it into io_ptr.  Again do this in-place to avoid calling a
1575             * libpng function that requires error handling.
1576             */
1577            image->opaque->memory = png_voidcast(png_const_bytep, memory);
1578            image->opaque->size = size;
1579            image->opaque->png_ptr->io_ptr = image;
1580            image->opaque->png_ptr->read_data_fn = png_image_memory_read;
1581
1582            return png_safe_execute(image, png_image_read_header, image);
1583         }
1584      }
1585
1586      else
1587         return png_image_error(image,
1588             "png_image_begin_read_from_memory: invalid argument");
1589   }
1590
1591   else if (image != NULL)
1592      return png_image_error(image,
1593          "png_image_begin_read_from_memory: incorrect PNG_IMAGE_VERSION");
1594
1595   return 0;
1596}
1597
1598/* Utility function to skip chunks that are not used by the simplified image
1599 * read functions and an appropriate macro to call it.
1600 */
1601#ifdef PNG_HANDLE_AS_UNKNOWN_SUPPORTED
1602static void
1603png_image_skip_unused_chunks(png_structrp png_ptr)
1604{
1605   /* Prepare the reader to ignore all recognized chunks whose data will not
1606    * be used, i.e., all chunks recognized by libpng except for those
1607    * involved in basic image reading:
1608    *
1609    *    IHDR, PLTE, IDAT, IEND
1610    *
1611    * Or image data handling:
1612    *
1613    *    tRNS, bKGD, gAMA, cHRM, sRGB, [iCCP] and sBIT.
1614    *
1615    * This provides a small performance improvement and eliminates any
1616    * potential vulnerability to security problems in the unused chunks.
1617    *
1618    * At present the iCCP chunk data isn't used, so iCCP chunk can be ignored
1619    * too.  This allows the simplified API to be compiled without iCCP support,
1620    * however if the support is there the chunk is still checked to detect
1621    * errors (which are unfortunately quite common.)
1622    */
1623   {
1624         static PNG_CONST png_byte chunks_to_process[] = {
1625            98,  75,  71,  68, '\0',  /* bKGD */
1626            99,  72,  82,  77, '\0',  /* cHRM */
1627           103,  65,  77,  65, '\0',  /* gAMA */
1628#        ifdef PNG_READ_iCCP_SUPPORTED
1629           105,  67,  67,  80, '\0',  /* iCCP */
1630#        endif
1631           115,  66,  73,  84, '\0',  /* sBIT */
1632           115,  82,  71,  66, '\0',  /* sRGB */
1633           };
1634
1635       /* Ignore unknown chunks and all other chunks except for the
1636        * IHDR, PLTE, tRNS, IDAT, and IEND chunks.
1637        */
1638       png_set_keep_unknown_chunks(png_ptr, PNG_HANDLE_CHUNK_NEVER,
1639           NULL, -1);
1640
1641       /* But do not ignore image data handling chunks */
1642       png_set_keep_unknown_chunks(png_ptr, PNG_HANDLE_CHUNK_AS_DEFAULT,
1643           chunks_to_process, (int)/*SAFE*/(sizeof chunks_to_process)/5);
1644   }
1645}
1646
1647#  define PNG_SKIP_CHUNKS(p) png_image_skip_unused_chunks(p)
1648#else
1649#  define PNG_SKIP_CHUNKS(p) ((void)0)
1650#endif /* HANDLE_AS_UNKNOWN */
1651
1652/* The following macro gives the exact rounded answer for all values in the
1653 * range 0..255 (it actually divides by 51.2, but the rounding still generates
1654 * the correct numbers 0..5
1655 */
1656#define PNG_DIV51(v8) (((v8) * 5 + 130) >> 8)
1657
1658/* Utility functions to make particular color-maps */
1659static void
1660set_file_encoding(png_image_read_control *display)
1661{
1662   png_fixed_point g = display->image->opaque->png_ptr->colorspace.gamma;
1663   if (png_gamma_significant(g) != 0)
1664   {
1665      if (png_gamma_not_sRGB(g) != 0)
1666      {
1667         display->file_encoding = P_FILE;
1668         display->gamma_to_linear = png_reciprocal(g);
1669      }
1670
1671      else
1672         display->file_encoding = P_sRGB;
1673   }
1674
1675   else
1676      display->file_encoding = P_LINEAR8;
1677}
1678
1679static unsigned int
1680decode_gamma(png_image_read_control *display, png_uint_32 value, int encoding)
1681{
1682   if (encoding == P_FILE) /* double check */
1683      encoding = display->file_encoding;
1684
1685   if (encoding == P_NOTSET) /* must be the file encoding */
1686   {
1687      set_file_encoding(display);
1688      encoding = display->file_encoding;
1689   }
1690
1691   switch (encoding)
1692   {
1693      case P_FILE:
1694         value = png_gamma_16bit_correct(value*257, display->gamma_to_linear);
1695         break;
1696
1697      case P_sRGB:
1698         value = png_sRGB_table[value];
1699         break;
1700
1701      case P_LINEAR:
1702         break;
1703
1704      case P_LINEAR8:
1705         value *= 257;
1706         break;
1707
1708#ifdef __GNUC__
1709      default:
1710         png_error(display->image->opaque->png_ptr,
1711             "unexpected encoding (internal error)");
1712#endif
1713   }
1714
1715   return value;
1716}
1717
1718static png_uint_32
1719png_colormap_compose(png_image_read_control *display,
1720    png_uint_32 foreground, int foreground_encoding, png_uint_32 alpha,
1721    png_uint_32 background, int encoding)
1722{
1723   /* The file value is composed on the background, the background has the given
1724    * encoding and so does the result, the file is encoded with P_FILE and the
1725    * file and alpha are 8-bit values.  The (output) encoding will always be
1726    * P_LINEAR or P_sRGB.
1727    */
1728   png_uint_32 f = decode_gamma(display, foreground, foreground_encoding);
1729   png_uint_32 b = decode_gamma(display, background, encoding);
1730
1731   /* The alpha is always an 8-bit value (it comes from the palette), the value
1732    * scaled by 255 is what PNG_sRGB_FROM_LINEAR requires.
1733    */
1734   f = f * alpha + b * (255-alpha);
1735
1736   if (encoding == P_LINEAR)
1737   {
1738      /* Scale to 65535; divide by 255, approximately (in fact this is extremely
1739       * accurate, it divides by 255.00000005937181414556, with no overflow.)
1740       */
1741      f *= 257; /* Now scaled by 65535 */
1742      f += f >> 16;
1743      f = (f+32768) >> 16;
1744   }
1745
1746   else /* P_sRGB */
1747      f = PNG_sRGB_FROM_LINEAR(f);
1748
1749   return f;
1750}
1751
1752/* NOTE: P_LINEAR values to this routine must be 16-bit, but P_FILE values must
1753 * be 8-bit.
1754 */
1755static void
1756png_create_colormap_entry(png_image_read_control *display,
1757    png_uint_32 ip, png_uint_32 red, png_uint_32 green, png_uint_32 blue,
1758    png_uint_32 alpha, int encoding)
1759{
1760   png_imagep image = display->image;
1761   const int output_encoding = (image->format & PNG_FORMAT_FLAG_LINEAR) != 0 ?
1762       P_LINEAR : P_sRGB;
1763   const int convert_to_Y = (image->format & PNG_FORMAT_FLAG_COLOR) == 0 &&
1764       (red != green || green != blue);
1765
1766   if (ip > 255)
1767      png_error(image->opaque->png_ptr, "color-map index out of range");
1768
1769   /* Update the cache with whether the file gamma is significantly different
1770    * from sRGB.
1771    */
1772   if (encoding == P_FILE)
1773   {
1774      if (display->file_encoding == P_NOTSET)
1775         set_file_encoding(display);
1776
1777      /* Note that the cached value may be P_FILE too, but if it is then the
1778       * gamma_to_linear member has been set.
1779       */
1780      encoding = display->file_encoding;
1781   }
1782
1783   if (encoding == P_FILE)
1784   {
1785      png_fixed_point g = display->gamma_to_linear;
1786
1787      red = png_gamma_16bit_correct(red*257, g);
1788      green = png_gamma_16bit_correct(green*257, g);
1789      blue = png_gamma_16bit_correct(blue*257, g);
1790
1791      if (convert_to_Y != 0 || output_encoding == P_LINEAR)
1792      {
1793         alpha *= 257;
1794         encoding = P_LINEAR;
1795      }
1796
1797      else
1798      {
1799         red = PNG_sRGB_FROM_LINEAR(red * 255);
1800         green = PNG_sRGB_FROM_LINEAR(green * 255);
1801         blue = PNG_sRGB_FROM_LINEAR(blue * 255);
1802         encoding = P_sRGB;
1803      }
1804   }
1805
1806   else if (encoding == P_LINEAR8)
1807   {
1808      /* This encoding occurs quite frequently in test cases because PngSuite
1809       * includes a gAMA 1.0 chunk with most images.
1810       */
1811      red *= 257;
1812      green *= 257;
1813      blue *= 257;
1814      alpha *= 257;
1815      encoding = P_LINEAR;
1816   }
1817
1818   else if (encoding == P_sRGB &&
1819       (convert_to_Y  != 0 || output_encoding == P_LINEAR))
1820   {
1821      /* The values are 8-bit sRGB values, but must be converted to 16-bit
1822       * linear.
1823       */
1824      red = png_sRGB_table[red];
1825      green = png_sRGB_table[green];
1826      blue = png_sRGB_table[blue];
1827      alpha *= 257;
1828      encoding = P_LINEAR;
1829   }
1830
1831   /* This is set if the color isn't gray but the output is. */
1832   if (encoding == P_LINEAR)
1833   {
1834      if (convert_to_Y != 0)
1835      {
1836         /* NOTE: these values are copied from png_do_rgb_to_gray */
1837         png_uint_32 y = (png_uint_32)6968 * red  + (png_uint_32)23434 * green +
1838            (png_uint_32)2366 * blue;
1839
1840         if (output_encoding == P_LINEAR)
1841            y = (y + 16384) >> 15;
1842
1843         else
1844         {
1845            /* y is scaled by 32768, we need it scaled by 255: */
1846            y = (y + 128) >> 8;
1847            y *= 255;
1848            y = PNG_sRGB_FROM_LINEAR((y + 64) >> 7);
1849            alpha = PNG_DIV257(alpha);
1850            encoding = P_sRGB;
1851         }
1852
1853         blue = red = green = y;
1854      }
1855
1856      else if (output_encoding == P_sRGB)
1857      {
1858         red = PNG_sRGB_FROM_LINEAR(red * 255);
1859         green = PNG_sRGB_FROM_LINEAR(green * 255);
1860         blue = PNG_sRGB_FROM_LINEAR(blue * 255);
1861         alpha = PNG_DIV257(alpha);
1862         encoding = P_sRGB;
1863      }
1864   }
1865
1866   if (encoding != output_encoding)
1867      png_error(image->opaque->png_ptr, "bad encoding (internal error)");
1868
1869   /* Store the value. */
1870   {
1871#     ifdef PNG_FORMAT_AFIRST_SUPPORTED
1872         const int afirst = (image->format & PNG_FORMAT_FLAG_AFIRST) != 0 &&
1873            (image->format & PNG_FORMAT_FLAG_ALPHA) != 0;
1874#     else
1875#        define afirst 0
1876#     endif
1877#     ifdef PNG_FORMAT_BGR_SUPPORTED
1878         const int bgr = (image->format & PNG_FORMAT_FLAG_BGR) != 0 ? 2 : 0;
1879#     else
1880#        define bgr 0
1881#     endif
1882
1883      if (output_encoding == P_LINEAR)
1884      {
1885         png_uint_16p entry = png_voidcast(png_uint_16p, display->colormap);
1886
1887         entry += ip * PNG_IMAGE_SAMPLE_CHANNELS(image->format);
1888
1889         /* The linear 16-bit values must be pre-multiplied by the alpha channel
1890          * value, if less than 65535 (this is, effectively, composite on black
1891          * if the alpha channel is removed.)
1892          */
1893         switch (PNG_IMAGE_SAMPLE_CHANNELS(image->format))
1894         {
1895            case 4:
1896               entry[afirst ? 0 : 3] = (png_uint_16)alpha;
1897               /* FALLTHROUGH */
1898
1899            case 3:
1900               if (alpha < 65535)
1901               {
1902                  if (alpha > 0)
1903                  {
1904                     blue = (blue * alpha + 32767U)/65535U;
1905                     green = (green * alpha + 32767U)/65535U;
1906                     red = (red * alpha + 32767U)/65535U;
1907                  }
1908
1909                  else
1910                     red = green = blue = 0;
1911               }
1912               entry[afirst + (2 ^ bgr)] = (png_uint_16)blue;
1913               entry[afirst + 1] = (png_uint_16)green;
1914               entry[afirst + bgr] = (png_uint_16)red;
1915               break;
1916
1917            case 2:
1918               entry[1 ^ afirst] = (png_uint_16)alpha;
1919               /* FALLTHROUGH */
1920
1921            case 1:
1922               if (alpha < 65535)
1923               {
1924                  if (alpha > 0)
1925                     green = (green * alpha + 32767U)/65535U;
1926
1927                  else
1928                     green = 0;
1929               }
1930               entry[afirst] = (png_uint_16)green;
1931               break;
1932
1933            default:
1934               break;
1935         }
1936      }
1937
1938      else /* output encoding is P_sRGB */
1939      {
1940         png_bytep entry = png_voidcast(png_bytep, display->colormap);
1941
1942         entry += ip * PNG_IMAGE_SAMPLE_CHANNELS(image->format);
1943
1944         switch (PNG_IMAGE_SAMPLE_CHANNELS(image->format))
1945         {
1946            case 4:
1947               entry[afirst ? 0 : 3] = (png_byte)alpha;
1948               /* FALLTHROUGH */
1949            case 3:
1950               entry[afirst + (2 ^ bgr)] = (png_byte)blue;
1951               entry[afirst + 1] = (png_byte)green;
1952               entry[afirst + bgr] = (png_byte)red;
1953               break;
1954
1955            case 2:
1956               entry[1 ^ afirst] = (png_byte)alpha;
1957               /* FALLTHROUGH */
1958            case 1:
1959               entry[afirst] = (png_byte)green;
1960               break;
1961
1962            default:
1963               break;
1964         }
1965      }
1966
1967#     ifdef afirst
1968#        undef afirst
1969#     endif
1970#     ifdef bgr
1971#        undef bgr
1972#     endif
1973   }
1974}
1975
1976static int
1977make_gray_file_colormap(png_image_read_control *display)
1978{
1979   unsigned int i;
1980
1981   for (i=0; i<256; ++i)
1982      png_create_colormap_entry(display, i, i, i, i, 255, P_FILE);
1983
1984   return (int)i;
1985}
1986
1987static int
1988make_gray_colormap(png_image_read_control *display)
1989{
1990   unsigned int i;
1991
1992   for (i=0; i<256; ++i)
1993      png_create_colormap_entry(display, i, i, i, i, 255, P_sRGB);
1994
1995   return (int)i;
1996}
1997#define PNG_GRAY_COLORMAP_ENTRIES 256
1998
1999static int
2000make_ga_colormap(png_image_read_control *display)
2001{
2002   unsigned int i, a;
2003
2004   /* Alpha is retained, the output will be a color-map with entries
2005    * selected by six levels of alpha.  One transparent entry, 6 gray
2006    * levels for all the intermediate alpha values, leaving 230 entries
2007    * for the opaque grays.  The color-map entries are the six values
2008    * [0..5]*51, the GA processing uses PNG_DIV51(value) to find the
2009    * relevant entry.
2010    *
2011    * if (alpha > 229) // opaque
2012    * {
2013    *    // The 231 entries are selected to make the math below work:
2014    *    base = 0;
2015    *    entry = (231 * gray + 128) >> 8;
2016    * }
2017    * else if (alpha < 26) // transparent
2018    * {
2019    *    base = 231;
2020    *    entry = 0;
2021    * }
2022    * else // partially opaque
2023    * {
2024    *    base = 226 + 6 * PNG_DIV51(alpha);
2025    *    entry = PNG_DIV51(gray);
2026    * }
2027    */
2028   i = 0;
2029   while (i < 231)
2030   {
2031      unsigned int gray = (i * 256 + 115) / 231;
2032      png_create_colormap_entry(display, i++, gray, gray, gray, 255, P_sRGB);
2033   }
2034
2035   /* 255 is used here for the component values for consistency with the code
2036    * that undoes premultiplication in pngwrite.c.
2037    */
2038   png_create_colormap_entry(display, i++, 255, 255, 255, 0, P_sRGB);
2039
2040   for (a=1; a<5; ++a)
2041   {
2042      unsigned int g;
2043
2044      for (g=0; g<6; ++g)
2045         png_create_colormap_entry(display, i++, g*51, g*51, g*51, a*51,
2046             P_sRGB);
2047   }
2048
2049   return (int)i;
2050}
2051
2052#define PNG_GA_COLORMAP_ENTRIES 256
2053
2054static int
2055make_rgb_colormap(png_image_read_control *display)
2056{
2057   unsigned int i, r;
2058
2059   /* Build a 6x6x6 opaque RGB cube */
2060   for (i=r=0; r<6; ++r)
2061   {
2062      unsigned int g;
2063
2064      for (g=0; g<6; ++g)
2065      {
2066         unsigned int b;
2067
2068         for (b=0; b<6; ++b)
2069            png_create_colormap_entry(display, i++, r*51, g*51, b*51, 255,
2070                P_sRGB);
2071      }
2072   }
2073
2074   return (int)i;
2075}
2076
2077#define PNG_RGB_COLORMAP_ENTRIES 216
2078
2079/* Return a palette index to the above palette given three 8-bit sRGB values. */
2080#define PNG_RGB_INDEX(r,g,b) \
2081   ((png_byte)(6 * (6 * PNG_DIV51(r) + PNG_DIV51(g)) + PNG_DIV51(b)))
2082
2083static int
2084png_image_read_colormap(png_voidp argument)
2085{
2086   png_image_read_control *display =
2087      png_voidcast(png_image_read_control*, argument);
2088   const png_imagep image = display->image;
2089
2090   const png_structrp png_ptr = image->opaque->png_ptr;
2091   const png_uint_32 output_format = image->format;
2092   const int output_encoding = (output_format & PNG_FORMAT_FLAG_LINEAR) != 0 ?
2093      P_LINEAR : P_sRGB;
2094
2095   unsigned int cmap_entries;
2096   unsigned int output_processing;        /* Output processing option */
2097   unsigned int data_encoding = P_NOTSET; /* Encoding libpng must produce */
2098
2099   /* Background information; the background color and the index of this color
2100    * in the color-map if it exists (else 256).
2101    */
2102   unsigned int background_index = 256;
2103   png_uint_32 back_r, back_g, back_b;
2104
2105   /* Flags to accumulate things that need to be done to the input. */
2106   int expand_tRNS = 0;
2107
2108   /* Exclude the NYI feature of compositing onto a color-mapped buffer; it is
2109    * very difficult to do, the results look awful, and it is difficult to see
2110    * what possible use it is because the application can't control the
2111    * color-map.
2112    */
2113   if (((png_ptr->color_type & PNG_COLOR_MASK_ALPHA) != 0 ||
2114         png_ptr->num_trans > 0) /* alpha in input */ &&
2115      ((output_format & PNG_FORMAT_FLAG_ALPHA) == 0) /* no alpha in output */)
2116   {
2117      if (output_encoding == P_LINEAR) /* compose on black */
2118         back_b = back_g = back_r = 0;
2119
2120      else if (display->background == NULL /* no way to remove it */)
2121         png_error(png_ptr,
2122             "background color must be supplied to remove alpha/transparency");
2123
2124      /* Get a copy of the background color (this avoids repeating the checks
2125       * below.)  The encoding is 8-bit sRGB or 16-bit linear, depending on the
2126       * output format.
2127       */
2128      else
2129      {
2130         back_g = display->background->green;
2131         if ((output_format & PNG_FORMAT_FLAG_COLOR) != 0)
2132         {
2133            back_r = display->background->red;
2134            back_b = display->background->blue;
2135         }
2136         else
2137            back_b = back_r = back_g;
2138      }
2139   }
2140
2141   else if (output_encoding == P_LINEAR)
2142      back_b = back_r = back_g = 65535;
2143
2144   else
2145      back_b = back_r = back_g = 255;
2146
2147   /* Default the input file gamma if required - this is necessary because
2148    * libpng assumes that if no gamma information is present the data is in the
2149    * output format, but the simplified API deduces the gamma from the input
2150    * format.
2151    */
2152   if ((png_ptr->colorspace.flags & PNG_COLORSPACE_HAVE_GAMMA) == 0)
2153   {
2154      /* Do this directly, not using the png_colorspace functions, to ensure
2155       * that it happens even if the colorspace is invalid (though probably if
2156       * it is the setting will be ignored)  Note that the same thing can be
2157       * achieved at the application interface with png_set_gAMA.
2158       */
2159      if (png_ptr->bit_depth == 16 &&
2160         (image->flags & PNG_IMAGE_FLAG_16BIT_sRGB) == 0)
2161         png_ptr->colorspace.gamma = PNG_GAMMA_LINEAR;
2162
2163      else
2164         png_ptr->colorspace.gamma = PNG_GAMMA_sRGB_INVERSE;
2165
2166      png_ptr->colorspace.flags |= PNG_COLORSPACE_HAVE_GAMMA;
2167   }
2168
2169   /* Decide what to do based on the PNG color type of the input data.  The
2170    * utility function png_create_colormap_entry deals with most aspects of the
2171    * output transformations; this code works out how to produce bytes of
2172    * color-map entries from the original format.
2173    */
2174   switch (png_ptr->color_type)
2175   {
2176      case PNG_COLOR_TYPE_GRAY:
2177         if (png_ptr->bit_depth <= 8)
2178         {
2179            /* There at most 256 colors in the output, regardless of
2180             * transparency.
2181             */
2182            unsigned int step, i, val, trans = 256/*ignore*/, back_alpha = 0;
2183
2184            cmap_entries = 1U << png_ptr->bit_depth;
2185            if (cmap_entries > image->colormap_entries)
2186               png_error(png_ptr, "gray[8] color-map: too few entries");
2187
2188            step = 255 / (cmap_entries - 1);
2189            output_processing = PNG_CMAP_NONE;
2190
2191            /* If there is a tRNS chunk then this either selects a transparent
2192             * value or, if the output has no alpha, the background color.
2193             */
2194            if (png_ptr->num_trans > 0)
2195            {
2196               trans = png_ptr->trans_color.gray;
2197
2198               if ((output_format & PNG_FORMAT_FLAG_ALPHA) == 0)
2199                  back_alpha = output_encoding == P_LINEAR ? 65535 : 255;
2200            }
2201
2202            /* png_create_colormap_entry just takes an RGBA and writes the
2203             * corresponding color-map entry using the format from 'image',
2204             * including the required conversion to sRGB or linear as
2205             * appropriate.  The input values are always either sRGB (if the
2206             * gamma correction flag is 0) or 0..255 scaled file encoded values
2207             * (if the function must gamma correct them).
2208             */
2209            for (i=val=0; i<cmap_entries; ++i, val += step)
2210            {
2211               /* 'i' is a file value.  While this will result in duplicated
2212                * entries for 8-bit non-sRGB encoded files it is necessary to
2213                * have non-gamma corrected values to do tRNS handling.
2214                */
2215               if (i != trans)
2216                  png_create_colormap_entry(display, i, val, val, val, 255,
2217                      P_FILE/*8-bit with file gamma*/);
2218
2219               /* Else this entry is transparent.  The colors don't matter if
2220                * there is an alpha channel (back_alpha == 0), but it does no
2221                * harm to pass them in; the values are not set above so this
2222                * passes in white.
2223                *
2224                * NOTE: this preserves the full precision of the application
2225                * supplied background color when it is used.
2226                */
2227               else
2228                  png_create_colormap_entry(display, i, back_r, back_g, back_b,
2229                      back_alpha, output_encoding);
2230            }
2231
2232            /* We need libpng to preserve the original encoding. */
2233            data_encoding = P_FILE;
2234
2235            /* The rows from libpng, while technically gray values, are now also
2236             * color-map indices; however, they may need to be expanded to 1
2237             * byte per pixel.  This is what png_set_packing does (i.e., it
2238             * unpacks the bit values into bytes.)
2239             */
2240            if (png_ptr->bit_depth < 8)
2241               png_set_packing(png_ptr);
2242         }
2243
2244         else /* bit depth is 16 */
2245         {
2246            /* The 16-bit input values can be converted directly to 8-bit gamma
2247             * encoded values; however, if a tRNS chunk is present 257 color-map
2248             * entries are required.  This means that the extra entry requires
2249             * special processing; add an alpha channel, sacrifice gray level
2250             * 254 and convert transparent (alpha==0) entries to that.
2251             *
2252             * Use libpng to chop the data to 8 bits.  Convert it to sRGB at the
2253             * same time to minimize quality loss.  If a tRNS chunk is present
2254             * this means libpng must handle it too; otherwise it is impossible
2255             * to do the exact match on the 16-bit value.
2256             *
2257             * If the output has no alpha channel *and* the background color is
2258             * gray then it is possible to let libpng handle the substitution by
2259             * ensuring that the corresponding gray level matches the background
2260             * color exactly.
2261             */
2262            data_encoding = P_sRGB;
2263
2264            if (PNG_GRAY_COLORMAP_ENTRIES > image->colormap_entries)
2265               png_error(png_ptr, "gray[16] color-map: too few entries");
2266
2267            cmap_entries = (unsigned int)make_gray_colormap(display);
2268
2269            if (png_ptr->num_trans > 0)
2270            {
2271               unsigned int back_alpha;
2272
2273               if ((output_format & PNG_FORMAT_FLAG_ALPHA) != 0)
2274                  back_alpha = 0;
2275
2276               else
2277               {
2278                  if (back_r == back_g && back_g == back_b)
2279                  {
2280                     /* Background is gray; no special processing will be
2281                      * required.
2282                      */
2283                     png_color_16 c;
2284                     png_uint_32 gray = back_g;
2285
2286                     if (output_encoding == P_LINEAR)
2287                     {
2288                        gray = PNG_sRGB_FROM_LINEAR(gray * 255);
2289
2290                        /* And make sure the corresponding palette entry
2291                         * matches.
2292                         */
2293                        png_create_colormap_entry(display, gray, back_g, back_g,
2294                            back_g, 65535, P_LINEAR);
2295                     }
2296
2297                     /* The background passed to libpng, however, must be the
2298                      * sRGB value.
2299                      */
2300                     c.index = 0; /*unused*/
2301                     c.gray = c.red = c.green = c.blue = (png_uint_16)gray;
2302
2303                     /* NOTE: does this work without expanding tRNS to alpha?
2304                      * It should be the color->gray case below apparently
2305                      * doesn't.
2306                      */
2307                     png_set_background_fixed(png_ptr, &c,
2308                         PNG_BACKGROUND_GAMMA_SCREEN, 0/*need_expand*/,
2309                         0/*gamma: not used*/);
2310
2311                     output_processing = PNG_CMAP_NONE;
2312                     break;
2313                  }
2314#ifdef __COVERITY__
2315                 /* Coverity claims that output_encoding cannot be 2 (P_LINEAR)
2316                  * here.
2317                  */
2318                  back_alpha = 255;
2319#else
2320                  back_alpha = output_encoding == P_LINEAR ? 65535 : 255;
2321#endif
2322               }
2323
2324               /* output_processing means that the libpng-processed row will be
2325                * 8-bit GA and it has to be processing to single byte color-map
2326                * values.  Entry 254 is replaced by either a completely
2327                * transparent entry or by the background color at full
2328                * precision (and the background color is not a simple gray
2329                * level in this case.)
2330                */
2331               expand_tRNS = 1;
2332               output_processing = PNG_CMAP_TRANS;
2333               background_index = 254;
2334
2335               /* And set (overwrite) color-map entry 254 to the actual
2336                * background color at full precision.
2337                */
2338               png_create_colormap_entry(display, 254, back_r, back_g, back_b,
2339                   back_alpha, output_encoding);
2340            }
2341
2342            else
2343               output_processing = PNG_CMAP_NONE;
2344         }
2345         break;
2346
2347      case PNG_COLOR_TYPE_GRAY_ALPHA:
2348         /* 8-bit or 16-bit PNG with two channels - gray and alpha.  A minimum
2349          * of 65536 combinations.  If, however, the alpha channel is to be
2350          * removed there are only 256 possibilities if the background is gray.
2351          * (Otherwise there is a subset of the 65536 possibilities defined by
2352          * the triangle between black, white and the background color.)
2353          *
2354          * Reduce 16-bit files to 8-bit and sRGB encode the result.  No need to
2355          * worry about tRNS matching - tRNS is ignored if there is an alpha
2356          * channel.
2357          */
2358         data_encoding = P_sRGB;
2359
2360         if ((output_format & PNG_FORMAT_FLAG_ALPHA) != 0)
2361         {
2362            if (PNG_GA_COLORMAP_ENTRIES > image->colormap_entries)
2363               png_error(png_ptr, "gray+alpha color-map: too few entries");
2364
2365            cmap_entries = (unsigned int)make_ga_colormap(display);
2366
2367            background_index = PNG_CMAP_GA_BACKGROUND;
2368            output_processing = PNG_CMAP_GA;
2369         }
2370
2371         else /* alpha is removed */
2372         {
2373            /* Alpha must be removed as the PNG data is processed when the
2374             * background is a color because the G and A channels are
2375             * independent and the vector addition (non-parallel vectors) is a
2376             * 2-D problem.
2377             *
2378             * This can be reduced to the same algorithm as above by making a
2379             * colormap containing gray levels (for the opaque grays), a
2380             * background entry (for a transparent pixel) and a set of four six
2381             * level color values, one set for each intermediate alpha value.
2382             * See the comments in make_ga_colormap for how this works in the
2383             * per-pixel processing.
2384             *
2385             * If the background is gray, however, we only need a 256 entry gray
2386             * level color map.  It is sufficient to make the entry generated
2387             * for the background color be exactly the color specified.
2388             */
2389            if ((output_format & PNG_FORMAT_FLAG_COLOR) == 0 ||
2390               (back_r == back_g && back_g == back_b))
2391            {
2392               /* Background is gray; no special processing will be required. */
2393               png_color_16 c;
2394               png_uint_32 gray = back_g;
2395
2396               if (PNG_GRAY_COLORMAP_ENTRIES > image->colormap_entries)
2397                  png_error(png_ptr, "gray-alpha color-map: too few entries");
2398
2399               cmap_entries = (unsigned int)make_gray_colormap(display);
2400
2401               if (output_encoding == P_LINEAR)
2402               {
2403                  gray = PNG_sRGB_FROM_LINEAR(gray * 255);
2404
2405                  /* And make sure the corresponding palette entry matches. */
2406                  png_create_colormap_entry(display, gray, back_g, back_g,
2407                      back_g, 65535, P_LINEAR);
2408               }
2409
2410               /* The background passed to libpng, however, must be the sRGB
2411                * value.
2412                */
2413               c.index = 0; /*unused*/
2414               c.gray = c.red = c.green = c.blue = (png_uint_16)gray;
2415
2416               png_set_background_fixed(png_ptr, &c,
2417                   PNG_BACKGROUND_GAMMA_SCREEN, 0/*need_expand*/,
2418                   0/*gamma: not used*/);
2419
2420               output_processing = PNG_CMAP_NONE;
2421            }
2422
2423            else
2424            {
2425               png_uint_32 i, a;
2426
2427               /* This is the same as png_make_ga_colormap, above, except that
2428                * the entries are all opaque.
2429                */
2430               if (PNG_GA_COLORMAP_ENTRIES > image->colormap_entries)
2431                  png_error(png_ptr, "ga-alpha color-map: too few entries");
2432
2433               i = 0;
2434               while (i < 231)
2435               {
2436                  png_uint_32 gray = (i * 256 + 115) / 231;
2437                  png_create_colormap_entry(display, i++, gray, gray, gray,
2438                      255, P_sRGB);
2439               }
2440
2441               /* NOTE: this preserves the full precision of the application
2442                * background color.
2443                */
2444               background_index = i;
2445               png_create_colormap_entry(display, i++, back_r, back_g, back_b,
2446#ifdef __COVERITY__
2447                   /* Coverity claims that output_encoding
2448                    * cannot be 2 (P_LINEAR) here.
2449                    */ 255U,
2450#else
2451                    output_encoding == P_LINEAR ? 65535U : 255U,
2452#endif
2453                    output_encoding);
2454
2455               /* For non-opaque input composite on the sRGB background - this
2456                * requires inverting the encoding for each component.  The input
2457                * is still converted to the sRGB encoding because this is a
2458                * reasonable approximate to the logarithmic curve of human
2459                * visual sensitivity, at least over the narrow range which PNG
2460                * represents.  Consequently 'G' is always sRGB encoded, while
2461                * 'A' is linear.  We need the linear background colors.
2462                */
2463               if (output_encoding == P_sRGB) /* else already linear */
2464               {
2465                  /* This may produce a value not exactly matching the
2466                   * background, but that's ok because these numbers are only
2467                   * used when alpha != 0
2468                   */
2469                  back_r = png_sRGB_table[back_r];
2470                  back_g = png_sRGB_table[back_g];
2471                  back_b = png_sRGB_table[back_b];
2472               }
2473
2474               for (a=1; a<5; ++a)
2475               {
2476                  unsigned int g;
2477
2478                  /* PNG_sRGB_FROM_LINEAR expects a 16-bit linear value scaled
2479                   * by an 8-bit alpha value (0..255).
2480                   */
2481                  png_uint_32 alpha = 51 * a;
2482                  png_uint_32 back_rx = (255-alpha) * back_r;
2483                  png_uint_32 back_gx = (255-alpha) * back_g;
2484                  png_uint_32 back_bx = (255-alpha) * back_b;
2485
2486                  for (g=0; g<6; ++g)
2487                  {
2488                     png_uint_32 gray = png_sRGB_table[g*51] * alpha;
2489
2490                     png_create_colormap_entry(display, i++,
2491                         PNG_sRGB_FROM_LINEAR(gray + back_rx),
2492                         PNG_sRGB_FROM_LINEAR(gray + back_gx),
2493                         PNG_sRGB_FROM_LINEAR(gray + back_bx), 255, P_sRGB);
2494                  }
2495               }
2496
2497               cmap_entries = i;
2498               output_processing = PNG_CMAP_GA;
2499            }
2500         }
2501         break;
2502
2503      case PNG_COLOR_TYPE_RGB:
2504      case PNG_COLOR_TYPE_RGB_ALPHA:
2505         /* Exclude the case where the output is gray; we can always handle this
2506          * with the cases above.
2507          */
2508         if ((output_format & PNG_FORMAT_FLAG_COLOR) == 0)
2509         {
2510            /* The color-map will be grayscale, so we may as well convert the
2511             * input RGB values to a simple grayscale and use the grayscale
2512             * code above.
2513             *
2514             * NOTE: calling this apparently damages the recognition of the
2515             * transparent color in background color handling; call
2516             * png_set_tRNS_to_alpha before png_set_background_fixed.
2517             */
2518            png_set_rgb_to_gray_fixed(png_ptr, PNG_ERROR_ACTION_NONE, -1,
2519                -1);
2520            data_encoding = P_sRGB;
2521
2522            /* The output will now be one or two 8-bit gray or gray+alpha
2523             * channels.  The more complex case arises when the input has alpha.
2524             */
2525            if ((png_ptr->color_type == PNG_COLOR_TYPE_RGB_ALPHA ||
2526               png_ptr->num_trans > 0) &&
2527               (output_format & PNG_FORMAT_FLAG_ALPHA) != 0)
2528            {
2529               /* Both input and output have an alpha channel, so no background
2530                * processing is required; just map the GA bytes to the right
2531                * color-map entry.
2532                */
2533               expand_tRNS = 1;
2534
2535               if (PNG_GA_COLORMAP_ENTRIES > image->colormap_entries)
2536                  png_error(png_ptr, "rgb[ga] color-map: too few entries");
2537
2538               cmap_entries = (unsigned int)make_ga_colormap(display);
2539               background_index = PNG_CMAP_GA_BACKGROUND;
2540               output_processing = PNG_CMAP_GA;
2541            }
2542
2543            else
2544            {
2545               /* Either the input or the output has no alpha channel, so there
2546                * will be no non-opaque pixels in the color-map; it will just be
2547                * grayscale.
2548                */
2549               if (PNG_GRAY_COLORMAP_ENTRIES > image->colormap_entries)
2550                  png_error(png_ptr, "rgb[gray] color-map: too few entries");
2551
2552               /* Ideally this code would use libpng to do the gamma correction,
2553                * but if an input alpha channel is to be removed we will hit the
2554                * libpng bug in gamma+compose+rgb-to-gray (the double gamma
2555                * correction bug).  Fix this by dropping the gamma correction in
2556                * this case and doing it in the palette; this will result in
2557                * duplicate palette entries, but that's better than the
2558                * alternative of double gamma correction.
2559                */
2560               if ((png_ptr->color_type == PNG_COLOR_TYPE_RGB_ALPHA ||
2561                  png_ptr->num_trans > 0) &&
2562                  png_gamma_not_sRGB(png_ptr->colorspace.gamma) != 0)
2563               {
2564                  cmap_entries = (unsigned int)make_gray_file_colormap(display);
2565                  data_encoding = P_FILE;
2566               }
2567
2568               else
2569                  cmap_entries = (unsigned int)make_gray_colormap(display);
2570
2571               /* But if the input has alpha or transparency it must be removed
2572                */
2573               if (png_ptr->color_type == PNG_COLOR_TYPE_RGB_ALPHA ||
2574                  png_ptr->num_trans > 0)
2575               {
2576                  png_color_16 c;
2577                  png_uint_32 gray = back_g;
2578
2579                  /* We need to ensure that the application background exists in
2580                   * the colormap and that completely transparent pixels map to
2581                   * it.  Achieve this simply by ensuring that the entry
2582                   * selected for the background really is the background color.
2583                   */
2584                  if (data_encoding == P_FILE) /* from the fixup above */
2585                  {
2586                     /* The app supplied a gray which is in output_encoding, we
2587                      * need to convert it to a value of the input (P_FILE)
2588                      * encoding then set this palette entry to the required
2589                      * output encoding.
2590                      */
2591                     if (output_encoding == P_sRGB)
2592                        gray = png_sRGB_table[gray]; /* now P_LINEAR */
2593
2594                     gray = PNG_DIV257(png_gamma_16bit_correct(gray,
2595                         png_ptr->colorspace.gamma)); /* now P_FILE */
2596
2597                     /* And make sure the corresponding palette entry contains
2598                      * exactly the required sRGB value.
2599                      */
2600                     png_create_colormap_entry(display, gray, back_g, back_g,
2601                         back_g, 0/*unused*/, output_encoding);
2602                  }
2603
2604                  else if (output_encoding == P_LINEAR)
2605                  {
2606                     gray = PNG_sRGB_FROM_LINEAR(gray * 255);
2607
2608                     /* And make sure the corresponding palette entry matches.
2609                      */
2610                     png_create_colormap_entry(display, gray, back_g, back_g,
2611                        back_g, 0/*unused*/, P_LINEAR);
2612                  }
2613
2614                  /* The background passed to libpng, however, must be the
2615                   * output (normally sRGB) value.
2616                   */
2617                  c.index = 0; /*unused*/
2618                  c.gray = c.red = c.green = c.blue = (png_uint_16)gray;
2619
2620                  /* NOTE: the following is apparently a bug in libpng. Without
2621                   * it the transparent color recognition in
2622                   * png_set_background_fixed seems to go wrong.
2623                   */
2624                  expand_tRNS = 1;
2625                  png_set_background_fixed(png_ptr, &c,
2626                      PNG_BACKGROUND_GAMMA_SCREEN, 0/*need_expand*/,
2627                      0/*gamma: not used*/);
2628               }
2629
2630               output_processing = PNG_CMAP_NONE;
2631            }
2632         }
2633
2634         else /* output is color */
2635         {
2636            /* We could use png_quantize here so long as there is no transparent
2637             * color or alpha; png_quantize ignores alpha.  Easier overall just
2638             * to do it once and using PNG_DIV51 on the 6x6x6 reduced RGB cube.
2639             * Consequently we always want libpng to produce sRGB data.
2640             */
2641            data_encoding = P_sRGB;
2642
2643            /* Is there any transparency or alpha? */
2644            if (png_ptr->color_type == PNG_COLOR_TYPE_RGB_ALPHA ||
2645               png_ptr->num_trans > 0)
2646            {
2647               /* Is there alpha in the output too?  If so all four channels are
2648                * processed into a special RGB cube with alpha support.
2649                */
2650               if ((output_format & PNG_FORMAT_FLAG_ALPHA) != 0)
2651               {
2652                  png_uint_32 r;
2653
2654                  if (PNG_RGB_COLORMAP_ENTRIES+1+27 > image->colormap_entries)
2655                     png_error(png_ptr, "rgb+alpha color-map: too few entries");
2656
2657                  cmap_entries = (unsigned int)make_rgb_colormap(display);
2658
2659                  /* Add a transparent entry. */
2660                  png_create_colormap_entry(display, cmap_entries, 255, 255,
2661                      255, 0, P_sRGB);
2662
2663                  /* This is stored as the background index for the processing
2664                   * algorithm.
2665                   */
2666                  background_index = cmap_entries++;
2667
2668                  /* Add 27 r,g,b entries each with alpha 0.5. */
2669                  for (r=0; r<256; r = (r << 1) | 0x7f)
2670                  {
2671                     png_uint_32 g;
2672
2673                     for (g=0; g<256; g = (g << 1) | 0x7f)
2674                     {
2675                        png_uint_32 b;
2676
2677                        /* This generates components with the values 0, 127 and
2678                         * 255
2679                         */
2680                        for (b=0; b<256; b = (b << 1) | 0x7f)
2681                           png_create_colormap_entry(display, cmap_entries++,
2682                               r, g, b, 128, P_sRGB);
2683                     }
2684                  }
2685
2686                  expand_tRNS = 1;
2687                  output_processing = PNG_CMAP_RGB_ALPHA;
2688               }
2689
2690               else
2691               {
2692                  /* Alpha/transparency must be removed.  The background must
2693                   * exist in the color map (achieved by setting adding it after
2694                   * the 666 color-map).  If the standard processing code will
2695                   * pick up this entry automatically that's all that is
2696                   * required; libpng can be called to do the background
2697                   * processing.
2698                   */
2699                  unsigned int sample_size =
2700                     PNG_IMAGE_SAMPLE_SIZE(output_format);
2701                  png_uint_32 r, g, b; /* sRGB background */
2702
2703                  if (PNG_RGB_COLORMAP_ENTRIES+1+27 > image->colormap_entries)
2704                     png_error(png_ptr, "rgb-alpha color-map: too few entries");
2705
2706                  cmap_entries = (unsigned int)make_rgb_colormap(display);
2707
2708                  png_create_colormap_entry(display, cmap_entries, back_r,
2709                      back_g, back_b, 0/*unused*/, output_encoding);
2710
2711                  if (output_encoding == P_LINEAR)
2712                  {
2713                     r = PNG_sRGB_FROM_LINEAR(back_r * 255);
2714                     g = PNG_sRGB_FROM_LINEAR(back_g * 255);
2715                     b = PNG_sRGB_FROM_LINEAR(back_b * 255);
2716                  }
2717
2718                  else
2719                  {
2720                     r = back_r;
2721                     g = back_g;
2722                     b = back_g;
2723                  }
2724
2725                  /* Compare the newly-created color-map entry with the one the
2726                   * PNG_CMAP_RGB algorithm will use.  If the two entries don't
2727                   * match, add the new one and set this as the background
2728                   * index.
2729                   */
2730                  if (memcmp((png_const_bytep)display->colormap +
2731                      sample_size * cmap_entries,
2732                      (png_const_bytep)display->colormap +
2733                          sample_size * PNG_RGB_INDEX(r,g,b),
2734                     sample_size) != 0)
2735                  {
2736                     /* The background color must be added. */
2737                     background_index = cmap_entries++;
2738
2739                     /* Add 27 r,g,b entries each with created by composing with
2740                      * the background at alpha 0.5.
2741                      */
2742                     for (r=0; r<256; r = (r << 1) | 0x7f)
2743                     {
2744                        for (g=0; g<256; g = (g << 1) | 0x7f)
2745                        {
2746                           /* This generates components with the values 0, 127
2747                            * and 255
2748                            */
2749                           for (b=0; b<256; b = (b << 1) | 0x7f)
2750                              png_create_colormap_entry(display, cmap_entries++,
2751                                  png_colormap_compose(display, r, P_sRGB, 128,
2752                                      back_r, output_encoding),
2753                                  png_colormap_compose(display, g, P_sRGB, 128,
2754                                      back_g, output_encoding),
2755                                  png_colormap_compose(display, b, P_sRGB, 128,
2756                                      back_b, output_encoding),
2757                                  0/*unused*/, output_encoding);
2758                        }
2759                     }
2760
2761                     expand_tRNS = 1;
2762                     output_processing = PNG_CMAP_RGB_ALPHA;
2763                  }
2764
2765                  else /* background color is in the standard color-map */
2766                  {
2767                     png_color_16 c;
2768
2769                     c.index = 0; /*unused*/
2770                     c.red = (png_uint_16)back_r;
2771                     c.gray = c.green = (png_uint_16)back_g;
2772                     c.blue = (png_uint_16)back_b;
2773
2774                     png_set_background_fixed(png_ptr, &c,
2775                         PNG_BACKGROUND_GAMMA_SCREEN, 0/*need_expand*/,
2776                         0/*gamma: not used*/);
2777
2778                     output_processing = PNG_CMAP_RGB;
2779                  }
2780               }
2781            }
2782
2783            else /* no alpha or transparency in the input */
2784            {
2785               /* Alpha in the output is irrelevant, simply map the opaque input
2786                * pixels to the 6x6x6 color-map.
2787                */
2788               if (PNG_RGB_COLORMAP_ENTRIES > image->colormap_entries)
2789                  png_error(png_ptr, "rgb color-map: too few entries");
2790
2791               cmap_entries = (unsigned int)make_rgb_colormap(display);
2792               output_processing = PNG_CMAP_RGB;
2793            }
2794         }
2795         break;
2796
2797      case PNG_COLOR_TYPE_PALETTE:
2798         /* It's already got a color-map.  It may be necessary to eliminate the
2799          * tRNS entries though.
2800          */
2801         {
2802            unsigned int num_trans = png_ptr->num_trans;
2803            png_const_bytep trans = num_trans > 0 ? png_ptr->trans_alpha : NULL;
2804            png_const_colorp colormap = png_ptr->palette;
2805            const int do_background = trans != NULL &&
2806               (output_format & PNG_FORMAT_FLAG_ALPHA) == 0;
2807            unsigned int i;
2808
2809            /* Just in case: */
2810            if (trans == NULL)
2811               num_trans = 0;
2812
2813            output_processing = PNG_CMAP_NONE;
2814            data_encoding = P_FILE; /* Don't change from color-map indices */
2815            cmap_entries = (unsigned int)png_ptr->num_palette;
2816            if (cmap_entries > 256)
2817               cmap_entries = 256;
2818
2819            if (cmap_entries > (unsigned int)image->colormap_entries)
2820               png_error(png_ptr, "palette color-map: too few entries");
2821
2822            for (i=0; i < cmap_entries; ++i)
2823            {
2824               if (do_background != 0 && i < num_trans && trans[i] < 255)
2825               {
2826                  if (trans[i] == 0)
2827                     png_create_colormap_entry(display, i, back_r, back_g,
2828                         back_b, 0, output_encoding);
2829
2830                  else
2831                  {
2832                     /* Must compose the PNG file color in the color-map entry
2833                      * on the sRGB color in 'back'.
2834                      */
2835                     png_create_colormap_entry(display, i,
2836                         png_colormap_compose(display, colormap[i].red,
2837                             P_FILE, trans[i], back_r, output_encoding),
2838                         png_colormap_compose(display, colormap[i].green,
2839                             P_FILE, trans[i], back_g, output_encoding),
2840                         png_colormap_compose(display, colormap[i].blue,
2841                             P_FILE, trans[i], back_b, output_encoding),
2842                         output_encoding == P_LINEAR ? trans[i] * 257U :
2843                             trans[i],
2844                         output_encoding);
2845                  }
2846               }
2847
2848               else
2849                  png_create_colormap_entry(display, i, colormap[i].red,
2850                      colormap[i].green, colormap[i].blue,
2851                      i < num_trans ? trans[i] : 255U, P_FILE/*8-bit*/);
2852            }
2853
2854            /* The PNG data may have indices packed in fewer than 8 bits, it
2855             * must be expanded if so.
2856             */
2857            if (png_ptr->bit_depth < 8)
2858               png_set_packing(png_ptr);
2859         }
2860         break;
2861
2862      default:
2863         png_error(png_ptr, "invalid PNG color type");
2864         /*NOT REACHED*/
2865   }
2866
2867   /* Now deal with the output processing */
2868   if (expand_tRNS != 0 && png_ptr->num_trans > 0 &&
2869       (png_ptr->color_type & PNG_COLOR_MASK_ALPHA) == 0)
2870      png_set_tRNS_to_alpha(png_ptr);
2871
2872   switch (data_encoding)
2873   {
2874      case P_sRGB:
2875         /* Change to 8-bit sRGB */
2876         png_set_alpha_mode_fixed(png_ptr, PNG_ALPHA_PNG, PNG_GAMMA_sRGB);
2877         /* FALLTHROUGH */
2878
2879      case P_FILE:
2880         if (png_ptr->bit_depth > 8)
2881            png_set_scale_16(png_ptr);
2882         break;
2883
2884#ifdef __GNUC__
2885      default:
2886         png_error(png_ptr, "bad data option (internal error)");
2887#endif
2888   }
2889
2890   if (cmap_entries > 256 || cmap_entries > image->colormap_entries)
2891      png_error(png_ptr, "color map overflow (BAD internal error)");
2892
2893   image->colormap_entries = cmap_entries;
2894
2895   /* Double check using the recorded background index */
2896   switch (output_processing)
2897   {
2898      case PNG_CMAP_NONE:
2899         if (background_index != PNG_CMAP_NONE_BACKGROUND)
2900            goto bad_background;
2901         break;
2902
2903      case PNG_CMAP_GA:
2904         if (background_index != PNG_CMAP_GA_BACKGROUND)
2905            goto bad_background;
2906         break;
2907
2908      case PNG_CMAP_TRANS:
2909         if (background_index >= cmap_entries ||
2910            background_index != PNG_CMAP_TRANS_BACKGROUND)
2911            goto bad_background;
2912         break;
2913
2914      case PNG_CMAP_RGB:
2915         if (background_index != PNG_CMAP_RGB_BACKGROUND)
2916            goto bad_background;
2917         break;
2918
2919      case PNG_CMAP_RGB_ALPHA:
2920         if (background_index != PNG_CMAP_RGB_ALPHA_BACKGROUND)
2921            goto bad_background;
2922         break;
2923
2924      default:
2925         png_error(png_ptr, "bad processing option (internal error)");
2926
2927      bad_background:
2928         png_error(png_ptr, "bad background index (internal error)");
2929   }
2930
2931   display->colormap_processing = (int)output_processing;
2932
2933   return 1/*ok*/;
2934}
2935
2936/* The final part of the color-map read called from png_image_finish_read. */
2937static int
2938png_image_read_and_map(png_voidp argument)
2939{
2940   png_image_read_control *display = png_voidcast(png_image_read_control*,
2941       argument);
2942   png_imagep image = display->image;
2943   png_structrp png_ptr = image->opaque->png_ptr;
2944   int passes;
2945
2946   /* Called when the libpng data must be transformed into the color-mapped
2947    * form.  There is a local row buffer in display->local and this routine must
2948    * do the interlace handling.
2949    */
2950   switch (png_ptr->interlaced)
2951   {
2952      case PNG_INTERLACE_NONE:
2953         passes = 1;
2954         break;
2955
2956      case PNG_INTERLACE_ADAM7:
2957         passes = PNG_INTERLACE_ADAM7_PASSES;
2958         break;
2959
2960      default:
2961         png_error(png_ptr, "unknown interlace type");
2962   }
2963
2964   {
2965      png_uint_32  height = image->height;
2966      png_uint_32  width = image->width;
2967      int          proc = display->colormap_processing;
2968      png_bytep    first_row = png_voidcast(png_bytep, display->first_row);
2969      ptrdiff_t    step_row = display->row_bytes;
2970      int pass;
2971
2972      for (pass = 0; pass < passes; ++pass)
2973      {
2974         unsigned int     startx, stepx, stepy;
2975         png_uint_32      y;
2976
2977         if (png_ptr->interlaced == PNG_INTERLACE_ADAM7)
2978         {
2979            /* The row may be empty for a short image: */
2980            if (PNG_PASS_COLS(width, pass) == 0)
2981               continue;
2982
2983            startx = PNG_PASS_START_COL(pass);
2984            stepx = PNG_PASS_COL_OFFSET(pass);
2985            y = PNG_PASS_START_ROW(pass);
2986            stepy = PNG_PASS_ROW_OFFSET(pass);
2987         }
2988
2989         else
2990         {
2991            y = 0;
2992            startx = 0;
2993            stepx = stepy = 1;
2994         }
2995
2996         for (; y<height; y += stepy)
2997         {
2998            png_bytep inrow = png_voidcast(png_bytep, display->local_row);
2999            png_bytep outrow = first_row + y * step_row;
3000            png_const_bytep end_row = outrow + width;
3001
3002            /* Read read the libpng data into the temporary buffer. */
3003            png_read_row(png_ptr, inrow, NULL);
3004
3005            /* Now process the row according to the processing option, note
3006             * that the caller verifies that the format of the libpng output
3007             * data is as required.
3008             */
3009            outrow += startx;
3010            switch (proc)
3011            {
3012               case PNG_CMAP_GA:
3013                  for (; outrow < end_row; outrow += stepx)
3014                  {
3015                     /* The data is always in the PNG order */
3016                     unsigned int gray = *inrow++;
3017                     unsigned int alpha = *inrow++;
3018                     unsigned int entry;
3019
3020                     /* NOTE: this code is copied as a comment in
3021                      * make_ga_colormap above.  Please update the
3022                      * comment if you change this code!
3023                      */
3024                     if (alpha > 229) /* opaque */
3025                     {
3026                        entry = (231 * gray + 128) >> 8;
3027                     }
3028                     else if (alpha < 26) /* transparent */
3029                     {
3030                        entry = 231;
3031                     }
3032                     else /* partially opaque */
3033                     {
3034                        entry = 226 + 6 * PNG_DIV51(alpha) + PNG_DIV51(gray);
3035                     }
3036
3037                     *outrow = (png_byte)entry;
3038                  }
3039                  break;
3040
3041               case PNG_CMAP_TRANS:
3042                  for (; outrow < end_row; outrow += stepx)
3043                  {
3044                     png_byte gray = *inrow++;
3045                     png_byte alpha = *inrow++;
3046
3047                     if (alpha == 0)
3048                        *outrow = PNG_CMAP_TRANS_BACKGROUND;
3049
3050                     else if (gray != PNG_CMAP_TRANS_BACKGROUND)
3051                        *outrow = gray;
3052
3053                     else
3054                        *outrow = (png_byte)(PNG_CMAP_TRANS_BACKGROUND+1);
3055                  }
3056                  break;
3057
3058               case PNG_CMAP_RGB:
3059                  for (; outrow < end_row; outrow += stepx)
3060                  {
3061                     *outrow = PNG_RGB_INDEX(inrow[0], inrow[1], inrow[2]);
3062                     inrow += 3;
3063                  }
3064                  break;
3065
3066               case PNG_CMAP_RGB_ALPHA:
3067                  for (; outrow < end_row; outrow += stepx)
3068                  {
3069                     unsigned int alpha = inrow[3];
3070
3071                     /* Because the alpha entries only hold alpha==0.5 values
3072                      * split the processing at alpha==0.25 (64) and 0.75
3073                      * (196).
3074                      */
3075
3076                     if (alpha >= 196)
3077                        *outrow = PNG_RGB_INDEX(inrow[0], inrow[1],
3078                            inrow[2]);
3079
3080                     else if (alpha < 64)
3081                        *outrow = PNG_CMAP_RGB_ALPHA_BACKGROUND;
3082
3083                     else
3084                     {
3085                        /* Likewise there are three entries for each of r, g
3086                         * and b.  We could select the entry by popcount on
3087                         * the top two bits on those architectures that
3088                         * support it, this is what the code below does,
3089                         * crudely.
3090                         */
3091                        unsigned int back_i = PNG_CMAP_RGB_ALPHA_BACKGROUND+1;
3092
3093                        /* Here are how the values map:
3094                         *
3095                         * 0x00 .. 0x3f -> 0
3096                         * 0x40 .. 0xbf -> 1
3097                         * 0xc0 .. 0xff -> 2
3098                         *
3099                         * So, as above with the explicit alpha checks, the
3100                         * breakpoints are at 64 and 196.
3101                         */
3102                        if (inrow[0] & 0x80) back_i += 9; /* red */
3103                        if (inrow[0] & 0x40) back_i += 9;
3104                        if (inrow[0] & 0x80) back_i += 3; /* green */
3105                        if (inrow[0] & 0x40) back_i += 3;
3106                        if (inrow[0] & 0x80) back_i += 1; /* blue */
3107                        if (inrow[0] & 0x40) back_i += 1;
3108
3109                        *outrow = (png_byte)back_i;
3110                     }
3111
3112                     inrow += 4;
3113                  }
3114                  break;
3115
3116               default:
3117                  break;
3118            }
3119         }
3120      }
3121   }
3122
3123   return 1;
3124}
3125
3126static int
3127png_image_read_colormapped(png_voidp argument)
3128{
3129   png_image_read_control *display = png_voidcast(png_image_read_control*,
3130       argument);
3131   png_imagep image = display->image;
3132   png_controlp control = image->opaque;
3133   png_structrp png_ptr = control->png_ptr;
3134   png_inforp info_ptr = control->info_ptr;
3135
3136   int passes = 0; /* As a flag */
3137
3138   PNG_SKIP_CHUNKS(png_ptr);
3139
3140   /* Update the 'info' structure and make sure the result is as required; first
3141    * make sure to turn on the interlace handling if it will be required
3142    * (because it can't be turned on *after* the call to png_read_update_info!)
3143    */
3144   if (display->colormap_processing == PNG_CMAP_NONE)
3145      passes = png_set_interlace_handling(png_ptr);
3146
3147   png_read_update_info(png_ptr, info_ptr);
3148
3149   /* The expected output can be deduced from the colormap_processing option. */
3150   switch (display->colormap_processing)
3151   {
3152      case PNG_CMAP_NONE:
3153         /* Output must be one channel and one byte per pixel, the output
3154          * encoding can be anything.
3155          */
3156         if ((info_ptr->color_type == PNG_COLOR_TYPE_PALETTE ||
3157            info_ptr->color_type == PNG_COLOR_TYPE_GRAY) &&
3158            info_ptr->bit_depth == 8)
3159            break;
3160
3161         goto bad_output;
3162
3163      case PNG_CMAP_TRANS:
3164      case PNG_CMAP_GA:
3165         /* Output must be two channels and the 'G' one must be sRGB, the latter
3166          * can be checked with an exact number because it should have been set
3167          * to this number above!
3168          */
3169         if (info_ptr->color_type == PNG_COLOR_TYPE_GRAY_ALPHA &&
3170            info_ptr->bit_depth == 8 &&
3171            png_ptr->screen_gamma == PNG_GAMMA_sRGB &&
3172            image->colormap_entries == 256)
3173            break;
3174
3175         goto bad_output;
3176
3177      case PNG_CMAP_RGB:
3178         /* Output must be 8-bit sRGB encoded RGB */
3179         if (info_ptr->color_type == PNG_COLOR_TYPE_RGB &&
3180            info_ptr->bit_depth == 8 &&
3181            png_ptr->screen_gamma == PNG_GAMMA_sRGB &&
3182            image->colormap_entries == 216)
3183            break;
3184
3185         goto bad_output;
3186
3187      case PNG_CMAP_RGB_ALPHA:
3188         /* Output must be 8-bit sRGB encoded RGBA */
3189         if (info_ptr->color_type == PNG_COLOR_TYPE_RGB_ALPHA &&
3190            info_ptr->bit_depth == 8 &&
3191            png_ptr->screen_gamma == PNG_GAMMA_sRGB &&
3192            image->colormap_entries == 244 /* 216 + 1 + 27 */)
3193            break;
3194
3195         goto bad_output;
3196
3197      default:
3198      bad_output:
3199         png_error(png_ptr, "bad color-map processing (internal error)");
3200   }
3201
3202   /* Now read the rows.  Do this here if it is possible to read directly into
3203    * the output buffer, otherwise allocate a local row buffer of the maximum
3204    * size libpng requires and call the relevant processing routine safely.
3205    */
3206   {
3207      png_voidp first_row = display->buffer;
3208      ptrdiff_t row_bytes = display->row_stride;
3209
3210      /* The following expression is designed to work correctly whether it gives
3211       * a signed or an unsigned result.
3212       */
3213      if (row_bytes < 0)
3214      {
3215         char *ptr = png_voidcast(char*, first_row);
3216         ptr += (image->height-1) * (-row_bytes);
3217         first_row = png_voidcast(png_voidp, ptr);
3218      }
3219
3220      display->first_row = first_row;
3221      display->row_bytes = row_bytes;
3222   }
3223
3224   if (passes == 0)
3225   {
3226      int result;
3227      png_voidp row = png_malloc(png_ptr, png_get_rowbytes(png_ptr, info_ptr));
3228
3229      display->local_row = row;
3230      result = png_safe_execute(image, png_image_read_and_map, display);
3231      display->local_row = NULL;
3232      png_free(png_ptr, row);
3233
3234      return result;
3235   }
3236
3237   else
3238   {
3239      png_alloc_size_t row_bytes = (png_alloc_size_t)display->row_bytes;
3240
3241      while (--passes >= 0)
3242      {
3243         png_uint_32      y = image->height;
3244         png_bytep        row = png_voidcast(png_bytep, display->first_row);
3245
3246         for (; y > 0; --y)
3247         {
3248            png_read_row(png_ptr, row, NULL);
3249            row += row_bytes;
3250         }
3251      }
3252
3253      return 1;
3254   }
3255}
3256
3257/* Just the row reading part of png_image_read. */
3258static int
3259png_image_read_composite(png_voidp argument)
3260{
3261   png_image_read_control *display = png_voidcast(png_image_read_control*,
3262       argument);
3263   png_imagep image = display->image;
3264   png_structrp png_ptr = image->opaque->png_ptr;
3265   int passes;
3266
3267   switch (png_ptr->interlaced)
3268   {
3269      case PNG_INTERLACE_NONE:
3270         passes = 1;
3271         break;
3272
3273      case PNG_INTERLACE_ADAM7:
3274         passes = PNG_INTERLACE_ADAM7_PASSES;
3275         break;
3276
3277      default:
3278         png_error(png_ptr, "unknown interlace type");
3279   }
3280
3281   {
3282      png_uint_32  height = image->height;
3283      png_uint_32  width = image->width;
3284      ptrdiff_t    step_row = display->row_bytes;
3285      unsigned int channels =
3286          (image->format & PNG_FORMAT_FLAG_COLOR) != 0 ? 3 : 1;
3287      int pass;
3288
3289      for (pass = 0; pass < passes; ++pass)
3290      {
3291         unsigned int     startx, stepx, stepy;
3292         png_uint_32      y;
3293
3294         if (png_ptr->interlaced == PNG_INTERLACE_ADAM7)
3295         {
3296            /* The row may be empty for a short image: */
3297            if (PNG_PASS_COLS(width, pass) == 0)
3298               continue;
3299
3300            startx = PNG_PASS_START_COL(pass) * channels;
3301            stepx = PNG_PASS_COL_OFFSET(pass) * channels;
3302            y = PNG_PASS_START_ROW(pass);
3303            stepy = PNG_PASS_ROW_OFFSET(pass);
3304         }
3305
3306         else
3307         {
3308            y = 0;
3309            startx = 0;
3310            stepx = channels;
3311            stepy = 1;
3312         }
3313
3314         for (; y<height; y += stepy)
3315         {
3316            png_bytep inrow = png_voidcast(png_bytep, display->local_row);
3317            png_bytep outrow;
3318            png_const_bytep end_row;
3319
3320            /* Read the row, which is packed: */
3321            png_read_row(png_ptr, inrow, NULL);
3322
3323            outrow = png_voidcast(png_bytep, display->first_row);
3324            outrow += y * step_row;
3325            end_row = outrow + width * channels;
3326
3327            /* Now do the composition on each pixel in this row. */
3328            outrow += startx;
3329            for (; outrow < end_row; outrow += stepx)
3330            {
3331               png_byte alpha = inrow[channels];
3332
3333               if (alpha > 0) /* else no change to the output */
3334               {
3335                  unsigned int c;
3336
3337                  for (c=0; c<channels; ++c)
3338                  {
3339                     png_uint_32 component = inrow[c];
3340
3341                     if (alpha < 255) /* else just use component */
3342                     {
3343                        /* This is PNG_OPTIMIZED_ALPHA, the component value
3344                         * is a linear 8-bit value.  Combine this with the
3345                         * current outrow[c] value which is sRGB encoded.
3346                         * Arithmetic here is 16-bits to preserve the output
3347                         * values correctly.
3348                         */
3349                        component *= 257*255; /* =65535 */
3350                        component += (255-alpha)*png_sRGB_table[outrow[c]];
3351
3352                        /* So 'component' is scaled by 255*65535 and is
3353                         * therefore appropriate for the sRGB to linear
3354                         * conversion table.
3355                         */
3356                        component = PNG_sRGB_FROM_LINEAR(component);
3357                     }
3358
3359                     outrow[c] = (png_byte)component;
3360                  }
3361               }
3362
3363               inrow += channels+1; /* components and alpha channel */
3364            }
3365         }
3366      }
3367   }
3368
3369   return 1;
3370}
3371
3372/* The do_local_background case; called when all the following transforms are to
3373 * be done:
3374 *
3375 * PNG_RGB_TO_GRAY
3376 * PNG_COMPOSITE
3377 * PNG_GAMMA
3378 *
3379 * This is a work-around for the fact that both the PNG_RGB_TO_GRAY and
3380 * PNG_COMPOSITE code performs gamma correction, so we get double gamma
3381 * correction.  The fix-up is to prevent the PNG_COMPOSITE operation from
3382 * happening inside libpng, so this routine sees an 8 or 16-bit gray+alpha
3383 * row and handles the removal or pre-multiplication of the alpha channel.
3384 */
3385static int
3386png_image_read_background(png_voidp argument)
3387{
3388   png_image_read_control *display = png_voidcast(png_image_read_control*,
3389       argument);
3390   png_imagep image = display->image;
3391   png_structrp png_ptr = image->opaque->png_ptr;
3392   png_inforp info_ptr = image->opaque->info_ptr;
3393   png_uint_32 height = image->height;
3394   png_uint_32 width = image->width;
3395   int pass, passes;
3396
3397   /* Double check the convoluted logic below.  We expect to get here with
3398    * libpng doing rgb to gray and gamma correction but background processing
3399    * left to the png_image_read_background function.  The rows libpng produce
3400    * might be 8 or 16-bit but should always have two channels; gray plus alpha.
3401    */
3402   if ((png_ptr->transformations & PNG_RGB_TO_GRAY) == 0)
3403      png_error(png_ptr, "lost rgb to gray");
3404
3405   if ((png_ptr->transformations & PNG_COMPOSE) != 0)
3406      png_error(png_ptr, "unexpected compose");
3407
3408   if (png_get_channels(png_ptr, info_ptr) != 2)
3409      png_error(png_ptr, "lost/gained channels");
3410
3411   /* Expect the 8-bit case to always remove the alpha channel */
3412   if ((image->format & PNG_FORMAT_FLAG_LINEAR) == 0 &&
3413      (image->format & PNG_FORMAT_FLAG_ALPHA) != 0)
3414      png_error(png_ptr, "unexpected 8-bit transformation");
3415
3416   switch (png_ptr->interlaced)
3417   {
3418      case PNG_INTERLACE_NONE:
3419         passes = 1;
3420         break;
3421
3422      case PNG_INTERLACE_ADAM7:
3423         passes = PNG_INTERLACE_ADAM7_PASSES;
3424         break;
3425
3426      default:
3427         png_error(png_ptr, "unknown interlace type");
3428   }
3429
3430   /* Use direct access to info_ptr here because otherwise the simplified API
3431    * would require PNG_EASY_ACCESS_SUPPORTED (just for this.)  Note this is
3432    * checking the value after libpng expansions, not the original value in the
3433    * PNG.
3434    */
3435   switch (info_ptr->bit_depth)
3436   {
3437      case 8:
3438         /* 8-bit sRGB gray values with an alpha channel; the alpha channel is
3439          * to be removed by composing on a background: either the row if
3440          * display->background is NULL or display->background->green if not.
3441          * Unlike the code above ALPHA_OPTIMIZED has *not* been done.
3442          */
3443         {
3444            png_bytep first_row = png_voidcast(png_bytep, display->first_row);
3445            ptrdiff_t step_row = display->row_bytes;
3446
3447            for (pass = 0; pass < passes; ++pass)
3448            {
3449               png_bytep row = png_voidcast(png_bytep, display->first_row);
3450               unsigned int     startx, stepx, stepy;
3451               png_uint_32      y;
3452
3453               if (png_ptr->interlaced == PNG_INTERLACE_ADAM7)
3454               {
3455                  /* The row may be empty for a short image: */
3456                  if (PNG_PASS_COLS(width, pass) == 0)
3457                     continue;
3458
3459                  startx = PNG_PASS_START_COL(pass);
3460                  stepx = PNG_PASS_COL_OFFSET(pass);
3461                  y = PNG_PASS_START_ROW(pass);
3462                  stepy = PNG_PASS_ROW_OFFSET(pass);
3463               }
3464
3465               else
3466               {
3467                  y = 0;
3468                  startx = 0;
3469                  stepx = stepy = 1;
3470               }
3471
3472               if (display->background == NULL)
3473               {
3474                  for (; y<height; y += stepy)
3475                  {
3476                     png_bytep inrow = png_voidcast(png_bytep,
3477                         display->local_row);
3478                     png_bytep outrow = first_row + y * step_row;
3479                     png_const_bytep end_row = outrow + width;
3480
3481                     /* Read the row, which is packed: */
3482                     png_read_row(png_ptr, inrow, NULL);
3483
3484                     /* Now do the composition on each pixel in this row. */
3485                     outrow += startx;
3486                     for (; outrow < end_row; outrow += stepx)
3487                     {
3488                        png_byte alpha = inrow[1];
3489
3490                        if (alpha > 0) /* else no change to the output */
3491                        {
3492                           png_uint_32 component = inrow[0];
3493
3494                           if (alpha < 255) /* else just use component */
3495                           {
3496                              /* Since PNG_OPTIMIZED_ALPHA was not set it is
3497                               * necessary to invert the sRGB transfer
3498                               * function and multiply the alpha out.
3499                               */
3500                              component = png_sRGB_table[component] * alpha;
3501                              component += png_sRGB_table[outrow[0]] *
3502                                 (255-alpha);
3503                              component = PNG_sRGB_FROM_LINEAR(component);
3504                           }
3505
3506                           outrow[0] = (png_byte)component;
3507                        }
3508
3509                        inrow += 2; /* gray and alpha channel */
3510                     }
3511                  }
3512               }
3513
3514               else /* constant background value */
3515               {
3516                  png_byte background8 = display->background->green;
3517                  png_uint_16 background = png_sRGB_table[background8];
3518
3519                  for (; y<height; y += stepy)
3520                  {
3521                     png_bytep inrow = png_voidcast(png_bytep,
3522                         display->local_row);
3523                     png_bytep outrow = first_row + y * step_row;
3524                     png_const_bytep end_row = outrow + width;
3525
3526                     /* Read the row, which is packed: */
3527                     png_read_row(png_ptr, inrow, NULL);
3528
3529                     /* Now do the composition on each pixel in this row. */
3530                     outrow += startx;
3531                     for (; outrow < end_row; outrow += stepx)
3532                     {
3533                        png_byte alpha = inrow[1];
3534
3535                        if (alpha > 0) /* else use background */
3536                        {
3537                           png_uint_32 component = inrow[0];
3538
3539                           if (alpha < 255) /* else just use component */
3540                           {
3541                              component = png_sRGB_table[component] * alpha;
3542                              component += background * (255-alpha);
3543                              component = PNG_sRGB_FROM_LINEAR(component);
3544                           }
3545
3546                           outrow[0] = (png_byte)component;
3547                        }
3548
3549                        else
3550                           outrow[0] = background8;
3551
3552                        inrow += 2; /* gray and alpha channel */
3553                     }
3554
3555                     row += display->row_bytes;
3556                  }
3557               }
3558            }
3559         }
3560         break;
3561
3562      case 16:
3563         /* 16-bit linear with pre-multiplied alpha; the pre-multiplication must
3564          * still be done and, maybe, the alpha channel removed.  This code also
3565          * handles the alpha-first option.
3566          */
3567         {
3568            png_uint_16p first_row = png_voidcast(png_uint_16p,
3569                display->first_row);
3570            /* The division by two is safe because the caller passed in a
3571             * stride which was multiplied by 2 (below) to get row_bytes.
3572             */
3573            ptrdiff_t    step_row = display->row_bytes / 2;
3574            unsigned int preserve_alpha = (image->format &
3575                PNG_FORMAT_FLAG_ALPHA) != 0;
3576            unsigned int outchannels = 1U+preserve_alpha;
3577            int swap_alpha = 0;
3578
3579#           ifdef PNG_SIMPLIFIED_READ_AFIRST_SUPPORTED
3580               if (preserve_alpha != 0 &&
3581                   (image->format & PNG_FORMAT_FLAG_AFIRST) != 0)
3582                  swap_alpha = 1;
3583#           endif
3584
3585            for (pass = 0; pass < passes; ++pass)
3586            {
3587               unsigned int     startx, stepx, stepy;
3588               png_uint_32      y;
3589
3590               /* The 'x' start and step are adjusted to output components here.
3591                */
3592               if (png_ptr->interlaced == PNG_INTERLACE_ADAM7)
3593               {
3594                  /* The row may be empty for a short image: */
3595                  if (PNG_PASS_COLS(width, pass) == 0)
3596                     continue;
3597
3598                  startx = PNG_PASS_START_COL(pass) * outchannels;
3599                  stepx = PNG_PASS_COL_OFFSET(pass) * outchannels;
3600                  y = PNG_PASS_START_ROW(pass);
3601                  stepy = PNG_PASS_ROW_OFFSET(pass);
3602               }
3603
3604               else
3605               {
3606                  y = 0;
3607                  startx = 0;
3608                  stepx = outchannels;
3609                  stepy = 1;
3610               }
3611
3612               for (; y<height; y += stepy)
3613               {
3614                  png_const_uint_16p inrow;
3615                  png_uint_16p outrow = first_row + y*step_row;
3616                  png_uint_16p end_row = outrow + width * outchannels;
3617
3618                  /* Read the row, which is packed: */
3619                  png_read_row(png_ptr, png_voidcast(png_bytep,
3620                      display->local_row), NULL);
3621                  inrow = png_voidcast(png_const_uint_16p, display->local_row);
3622
3623                  /* Now do the pre-multiplication on each pixel in this row.
3624                   */
3625                  outrow += startx;
3626                  for (; outrow < end_row; outrow += stepx)
3627                  {
3628                     png_uint_32 component = inrow[0];
3629                     png_uint_16 alpha = inrow[1];
3630
3631                     if (alpha > 0) /* else 0 */
3632                     {
3633                        if (alpha < 65535) /* else just use component */
3634                        {
3635                           component *= alpha;
3636                           component += 32767;
3637                           component /= 65535;
3638                        }
3639                     }
3640
3641                     else
3642                        component = 0;
3643
3644                     outrow[swap_alpha] = (png_uint_16)component;
3645                     if (preserve_alpha != 0)
3646                        outrow[1 ^ swap_alpha] = alpha;
3647
3648                     inrow += 2; /* components and alpha channel */
3649                  }
3650               }
3651            }
3652         }
3653         break;
3654
3655#ifdef __GNUC__
3656      default:
3657         png_error(png_ptr, "unexpected bit depth");
3658#endif
3659   }
3660
3661   return 1;
3662}
3663
3664/* The guts of png_image_finish_read as a png_safe_execute callback. */
3665static int
3666png_image_read_direct(png_voidp argument)
3667{
3668   png_image_read_control *display = png_voidcast(png_image_read_control*,
3669       argument);
3670   png_imagep image = display->image;
3671   png_structrp png_ptr = image->opaque->png_ptr;
3672   png_inforp info_ptr = image->opaque->info_ptr;
3673
3674   png_uint_32 format = image->format;
3675   int linear = (format & PNG_FORMAT_FLAG_LINEAR) != 0;
3676   int do_local_compose = 0;
3677   int do_local_background = 0; /* to avoid double gamma correction bug */
3678   int passes = 0;
3679
3680   /* Add transforms to ensure the correct output format is produced then check
3681    * that the required implementation support is there.  Always expand; always
3682    * need 8 bits minimum, no palette and expanded tRNS.
3683    */
3684   png_set_expand(png_ptr);
3685
3686   /* Now check the format to see if it was modified. */
3687   {
3688      png_uint_32 base_format = png_image_format(png_ptr) &
3689         ~PNG_FORMAT_FLAG_COLORMAP /* removed by png_set_expand */;
3690      png_uint_32 change = format ^ base_format;
3691      png_fixed_point output_gamma;
3692      int mode; /* alpha mode */
3693
3694      /* Do this first so that we have a record if rgb to gray is happening. */
3695      if ((change & PNG_FORMAT_FLAG_COLOR) != 0)
3696      {
3697         /* gray<->color transformation required. */
3698         if ((format & PNG_FORMAT_FLAG_COLOR) != 0)
3699            png_set_gray_to_rgb(png_ptr);
3700
3701         else
3702         {
3703            /* libpng can't do both rgb to gray and
3704             * background/pre-multiplication if there is also significant gamma
3705             * correction, because both operations require linear colors and
3706             * the code only supports one transform doing the gamma correction.
3707             * Handle this by doing the pre-multiplication or background
3708             * operation in this code, if necessary.
3709             *
3710             * TODO: fix this by rewriting pngrtran.c (!)
3711             *
3712             * For the moment (given that fixing this in pngrtran.c is an
3713             * enormous change) 'do_local_background' is used to indicate that
3714             * the problem exists.
3715             */
3716            if ((base_format & PNG_FORMAT_FLAG_ALPHA) != 0)
3717               do_local_background = 1/*maybe*/;
3718
3719            png_set_rgb_to_gray_fixed(png_ptr, PNG_ERROR_ACTION_NONE,
3720                PNG_RGB_TO_GRAY_DEFAULT, PNG_RGB_TO_GRAY_DEFAULT);
3721         }
3722
3723         change &= ~PNG_FORMAT_FLAG_COLOR;
3724      }
3725
3726      /* Set the gamma appropriately, linear for 16-bit input, sRGB otherwise.
3727       */
3728      {
3729         png_fixed_point input_gamma_default;
3730
3731         if ((base_format & PNG_FORMAT_FLAG_LINEAR) != 0 &&
3732             (image->flags & PNG_IMAGE_FLAG_16BIT_sRGB) == 0)
3733            input_gamma_default = PNG_GAMMA_LINEAR;
3734         else
3735            input_gamma_default = PNG_DEFAULT_sRGB;
3736
3737         /* Call png_set_alpha_mode to set the default for the input gamma; the
3738          * output gamma is set by a second call below.
3739          */
3740         png_set_alpha_mode_fixed(png_ptr, PNG_ALPHA_PNG, input_gamma_default);
3741      }
3742
3743      if (linear != 0)
3744      {
3745         /* If there *is* an alpha channel in the input it must be multiplied
3746          * out; use PNG_ALPHA_STANDARD, otherwise just use PNG_ALPHA_PNG.
3747          */
3748         if ((base_format & PNG_FORMAT_FLAG_ALPHA) != 0)
3749            mode = PNG_ALPHA_STANDARD; /* associated alpha */
3750
3751         else
3752            mode = PNG_ALPHA_PNG;
3753
3754         output_gamma = PNG_GAMMA_LINEAR;
3755      }
3756
3757      else
3758      {
3759         mode = PNG_ALPHA_PNG;
3760         output_gamma = PNG_DEFAULT_sRGB;
3761      }
3762      
3763      if ((change & PNG_FORMAT_FLAG_ASSOCIATED_ALPHA) != 0)
3764      {
3765         mode = PNG_ALPHA_OPTIMIZED;
3766         change &= ~PNG_FORMAT_FLAG_ASSOCIATED_ALPHA;
3767      }
3768      
3769      /* If 'do_local_background' is set check for the presence of gamma
3770       * correction; this is part of the work-round for the libpng bug
3771       * described above.
3772       *
3773       * TODO: fix libpng and remove this.
3774       */
3775      if (do_local_background != 0)
3776      {
3777         png_fixed_point gtest;
3778
3779         /* This is 'png_gamma_threshold' from pngrtran.c; the test used for
3780          * gamma correction, the screen gamma hasn't been set on png_struct
3781          * yet; it's set below.  png_struct::gamma, however, is set to the
3782          * final value.
3783          */
3784         if (png_muldiv(&gtest, output_gamma, png_ptr->colorspace.gamma,
3785             PNG_FP_1) != 0 && png_gamma_significant(gtest) == 0)
3786            do_local_background = 0;
3787
3788         else if (mode == PNG_ALPHA_STANDARD)
3789         {
3790            do_local_background = 2/*required*/;
3791            mode = PNG_ALPHA_PNG; /* prevent libpng doing it */
3792         }
3793
3794         /* else leave as 1 for the checks below */
3795      }
3796
3797      /* If the bit-depth changes then handle that here. */
3798      if ((change & PNG_FORMAT_FLAG_LINEAR) != 0)
3799      {
3800         if (linear != 0 /*16-bit output*/)
3801            png_set_expand_16(png_ptr);
3802
3803         else /* 8-bit output */
3804            png_set_scale_16(png_ptr);
3805
3806         change &= ~PNG_FORMAT_FLAG_LINEAR;
3807      }
3808
3809      /* Now the background/alpha channel changes. */
3810      if ((change & PNG_FORMAT_FLAG_ALPHA) != 0)
3811      {
3812         /* Removing an alpha channel requires composition for the 8-bit
3813          * formats; for the 16-bit it is already done, above, by the
3814          * pre-multiplication and the channel just needs to be stripped.
3815          */
3816         if ((base_format & PNG_FORMAT_FLAG_ALPHA) != 0)
3817         {
3818            /* If RGB->gray is happening the alpha channel must be left and the
3819             * operation completed locally.
3820             *
3821             * TODO: fix libpng and remove this.
3822             */
3823            if (do_local_background != 0)
3824               do_local_background = 2/*required*/;
3825
3826            /* 16-bit output: just remove the channel */
3827            else if (linear != 0) /* compose on black (well, pre-multiply) */
3828               png_set_strip_alpha(png_ptr);
3829
3830            /* 8-bit output: do an appropriate compose */
3831            else if (display->background != NULL)
3832            {
3833               png_color_16 c;
3834
3835               c.index = 0; /*unused*/
3836               c.red = display->background->red;
3837               c.green = display->background->green;
3838               c.blue = display->background->blue;
3839               c.gray = display->background->green;
3840
3841               /* This is always an 8-bit sRGB value, using the 'green' channel
3842                * for gray is much better than calculating the luminance here;
3843                * we can get off-by-one errors in that calculation relative to
3844                * the app expectations and that will show up in transparent
3845                * pixels.
3846                */
3847               png_set_background_fixed(png_ptr, &c,
3848                   PNG_BACKGROUND_GAMMA_SCREEN, 0/*need_expand*/,
3849                   0/*gamma: not used*/);
3850            }
3851
3852            else /* compose on row: implemented below. */
3853            {
3854               do_local_compose = 1;
3855               /* This leaves the alpha channel in the output, so it has to be
3856                * removed by the code below.  Set the encoding to the 'OPTIMIZE'
3857                * one so the code only has to hack on the pixels that require
3858                * composition.
3859                */
3860               mode = PNG_ALPHA_OPTIMIZED;
3861            }
3862         }
3863
3864         else /* output needs an alpha channel */
3865         {
3866            /* This is tricky because it happens before the swap operation has
3867             * been accomplished; however, the swap does *not* swap the added
3868             * alpha channel (weird API), so it must be added in the correct
3869             * place.
3870             */
3871            png_uint_32 filler; /* opaque filler */
3872            int where;
3873
3874            if (linear != 0)
3875               filler = 65535;
3876
3877            else
3878               filler = 255;
3879
3880#ifdef PNG_FORMAT_AFIRST_SUPPORTED
3881            if ((format & PNG_FORMAT_FLAG_AFIRST) != 0)
3882            {
3883               where = PNG_FILLER_BEFORE;
3884               change &= ~PNG_FORMAT_FLAG_AFIRST;
3885            }
3886
3887            else
3888#endif
3889            where = PNG_FILLER_AFTER;
3890
3891            png_set_add_alpha(png_ptr, filler, where);
3892         }
3893
3894         /* This stops the (irrelevant) call to swap_alpha below. */
3895         change &= ~PNG_FORMAT_FLAG_ALPHA;
3896      }
3897
3898      /* Now set the alpha mode correctly; this is always done, even if there is
3899       * no alpha channel in either the input or the output because it correctly
3900       * sets the output gamma.
3901       */
3902      png_set_alpha_mode_fixed(png_ptr, mode, output_gamma);
3903
3904#     ifdef PNG_FORMAT_BGR_SUPPORTED
3905         if ((change & PNG_FORMAT_FLAG_BGR) != 0)
3906         {
3907            /* Check only the output format; PNG is never BGR; don't do this if
3908             * the output is gray, but fix up the 'format' value in that case.
3909             */
3910            if ((format & PNG_FORMAT_FLAG_COLOR) != 0)
3911               png_set_bgr(png_ptr);
3912
3913            else
3914               format &= ~PNG_FORMAT_FLAG_BGR;
3915
3916            change &= ~PNG_FORMAT_FLAG_BGR;
3917         }
3918#     endif
3919
3920#     ifdef PNG_FORMAT_AFIRST_SUPPORTED
3921         if ((change & PNG_FORMAT_FLAG_AFIRST) != 0)
3922         {
3923            /* Only relevant if there is an alpha channel - it's particularly
3924             * important to handle this correctly because do_local_compose may
3925             * be set above and then libpng will keep the alpha channel for this
3926             * code to remove.
3927             */
3928            if ((format & PNG_FORMAT_FLAG_ALPHA) != 0)
3929            {
3930               /* Disable this if doing a local background,
3931                * TODO: remove this when local background is no longer required.
3932                */
3933               if (do_local_background != 2)
3934                  png_set_swap_alpha(png_ptr);
3935            }
3936
3937            else
3938               format &= ~PNG_FORMAT_FLAG_AFIRST;
3939
3940            change &= ~PNG_FORMAT_FLAG_AFIRST;
3941         }
3942#     endif
3943
3944      /* If the *output* is 16-bit then we need to check for a byte-swap on this
3945       * architecture.
3946       */
3947      if (linear != 0)
3948      {
3949         PNG_CONST png_uint_16 le = 0x0001;
3950
3951         if ((*(png_const_bytep) & le) != 0)
3952            png_set_swap(png_ptr);
3953      }
3954
3955      /* If change is not now 0 some transformation is missing - error out. */
3956      if (change != 0)
3957         png_error(png_ptr, "png_read_image: unsupported transformation");
3958   }
3959
3960   PNG_SKIP_CHUNKS(png_ptr);
3961
3962   /* Update the 'info' structure and make sure the result is as required; first
3963    * make sure to turn on the interlace handling if it will be required
3964    * (because it can't be turned on *after* the call to png_read_update_info!)
3965    *
3966    * TODO: remove the do_local_background fixup below.
3967    */
3968   if (do_local_compose == 0 && do_local_background != 2)
3969      passes = png_set_interlace_handling(png_ptr);
3970
3971   png_read_update_info(png_ptr, info_ptr);
3972
3973   {
3974      png_uint_32 info_format = 0;
3975
3976      if ((info_ptr->color_type & PNG_COLOR_MASK_COLOR) != 0)
3977         info_format |= PNG_FORMAT_FLAG_COLOR;
3978
3979      if ((info_ptr->color_type & PNG_COLOR_MASK_ALPHA) != 0)
3980      {
3981         /* do_local_compose removes this channel below. */
3982         if (do_local_compose == 0)
3983         {
3984            /* do_local_background does the same if required. */
3985            if (do_local_background != 2 ||
3986               (format & PNG_FORMAT_FLAG_ALPHA) != 0)
3987               info_format |= PNG_FORMAT_FLAG_ALPHA;
3988         }
3989      }
3990
3991      else if (do_local_compose != 0) /* internal error */
3992         png_error(png_ptr, "png_image_read: alpha channel lost");
3993
3994      if ((format & PNG_FORMAT_FLAG_ASSOCIATED_ALPHA) != 0) {
3995         info_format |= PNG_FORMAT_FLAG_ASSOCIATED_ALPHA;
3996      }
3997
3998      if (info_ptr->bit_depth == 16)
3999         info_format |= PNG_FORMAT_FLAG_LINEAR;
4000
4001#ifdef PNG_FORMAT_BGR_SUPPORTED
4002      if ((png_ptr->transformations & PNG_BGR) != 0)
4003         info_format |= PNG_FORMAT_FLAG_BGR;
4004#endif
4005
4006#ifdef PNG_FORMAT_AFIRST_SUPPORTED
4007         if (do_local_background == 2)
4008         {
4009            if ((format & PNG_FORMAT_FLAG_AFIRST) != 0)
4010               info_format |= PNG_FORMAT_FLAG_AFIRST;
4011         }
4012
4013         if ((png_ptr->transformations & PNG_SWAP_ALPHA) != 0 ||
4014            ((png_ptr->transformations & PNG_ADD_ALPHA) != 0 &&
4015            (png_ptr->flags & PNG_FLAG_FILLER_AFTER) == 0))
4016         {
4017            if (do_local_background == 2)
4018               png_error(png_ptr, "unexpected alpha swap transformation");
4019
4020            info_format |= PNG_FORMAT_FLAG_AFIRST;
4021         }
4022#     endif
4023
4024      /* This is actually an internal error. */
4025      if (info_format != format)
4026         png_error(png_ptr, "png_read_image: invalid transformations");
4027   }
4028
4029   /* Now read the rows.  If do_local_compose is set then it is necessary to use
4030    * a local row buffer.  The output will be GA, RGBA or BGRA and must be
4031    * converted to G, RGB or BGR as appropriate.  The 'local_row' member of the
4032    * display acts as a flag.
4033    */
4034   {
4035      png_voidp first_row = display->buffer;
4036      ptrdiff_t row_bytes = display->row_stride;
4037
4038      if (linear != 0)
4039         row_bytes *= 2;
4040
4041      /* The following expression is designed to work correctly whether it gives
4042       * a signed or an unsigned result.
4043       */
4044      if (row_bytes < 0)
4045      {
4046         char *ptr = png_voidcast(char*, first_row);
4047         ptr += (image->height-1) * (-row_bytes);
4048         first_row = png_voidcast(png_voidp, ptr);
4049      }
4050
4051      display->first_row = first_row;
4052      display->row_bytes = row_bytes;
4053   }
4054
4055   if (do_local_compose != 0)
4056   {
4057      int result;
4058      png_voidp row = png_malloc(png_ptr, png_get_rowbytes(png_ptr, info_ptr));
4059
4060      display->local_row = row;
4061      result = png_safe_execute(image, png_image_read_composite, display);
4062      display->local_row = NULL;
4063      png_free(png_ptr, row);
4064
4065      return result;
4066   }
4067
4068   else if (do_local_background == 2)
4069   {
4070      int result;
4071      png_voidp row = png_malloc(png_ptr, png_get_rowbytes(png_ptr, info_ptr));
4072
4073      display->local_row = row;
4074      result = png_safe_execute(image, png_image_read_background, display);
4075      display->local_row = NULL;
4076      png_free(png_ptr, row);
4077
4078      return result;
4079   }
4080
4081   else
4082   {
4083      png_alloc_size_t row_bytes = (png_alloc_size_t)display->row_bytes;
4084
4085      while (--passes >= 0)
4086      {
4087         png_uint_32      y = image->height;
4088         png_bytep        row = png_voidcast(png_bytep, display->first_row);
4089
4090         for (; y > 0; --y)
4091         {
4092            png_read_row(png_ptr, row, NULL);
4093            row += row_bytes;
4094         }
4095      }
4096
4097      return 1;
4098   }
4099}
4100
4101int PNGAPI
4102png_image_finish_read(png_imagep image, png_const_colorp background,
4103    void *buffer, png_int_32 row_stride, void *colormap)
4104{
4105   if (image != NULL && image->version == PNG_IMAGE_VERSION)
4106   {
4107      /* Check for row_stride overflow.  This check is not performed on the
4108       * original PNG format because it may not occur in the output PNG format
4109       * and libpng deals with the issues of reading the original.
4110       */
4111      const unsigned int channels = PNG_IMAGE_PIXEL_CHANNELS(image->format);
4112
4113      /* The following checks just the 'row_stride' calculation to ensure it
4114       * fits in a signed 32-bit value.  Because channels/components can be
4115       * either 1 or 2 bytes in size the length of a row can still overflow 32
4116       * bits; this is just to verify that the 'row_stride' argument can be
4117       * represented.
4118       */
4119      if (image->width <= 0x7fffffffU/channels) /* no overflow */
4120      {
4121         png_uint_32 check;
4122         const png_uint_32 png_row_stride = image->width * channels;
4123
4124         if (row_stride == 0)
4125            row_stride = (png_int_32)/*SAFE*/png_row_stride;
4126
4127         if (row_stride < 0)
4128            check = (png_uint_32)(-row_stride);
4129
4130         else
4131            check = (png_uint_32)row_stride;
4132
4133         /* This verifies 'check', the absolute value of the actual stride
4134          * passed in and detects overflow in the application calculation (i.e.
4135          * if the app did actually pass in a non-zero 'row_stride'.
4136          */
4137         if (image->opaque != NULL && buffer != NULL && check >= png_row_stride)
4138         {
4139            /* Now check for overflow of the image buffer calculation; this
4140             * limits the whole image size to 32 bits for API compatibility with
4141             * the current, 32-bit, PNG_IMAGE_BUFFER_SIZE macro.
4142             *
4143             * The PNG_IMAGE_BUFFER_SIZE macro is:
4144             *
4145             *    (PNG_IMAGE_PIXEL_COMPONENT_SIZE(fmt)*height*(row_stride))
4146             *
4147             * And the component size is always 1 or 2, so make sure that the
4148             * number of *bytes* that the application is saying are available
4149             * does actually fit into a 32-bit number.
4150             *
4151             * NOTE: this will be changed in 1.7 because PNG_IMAGE_BUFFER_SIZE
4152             * will be changed to use png_alloc_size_t; bigger images can be
4153             * accomodated on 64-bit systems.
4154             */
4155            if (image->height <=
4156                0xffffffffU/PNG_IMAGE_PIXEL_COMPONENT_SIZE(image->format)/check)
4157            {
4158               if ((image->format & PNG_FORMAT_FLAG_COLORMAP) == 0 ||
4159                  (image->colormap_entries > 0 && colormap != NULL))
4160               {
4161                  int result;
4162                  png_image_read_control display;
4163
4164                  memset(&display, 0, (sizeof display));
4165                  display.image = image;
4166                  display.buffer = buffer;
4167                  display.row_stride = row_stride;
4168                  display.colormap = colormap;
4169                  display.background = background;
4170                  display.local_row = NULL;
4171
4172                  /* Choose the correct 'end' routine; for the color-map case
4173                   * all the setup has already been done.
4174                   */
4175                  if ((image->format & PNG_FORMAT_FLAG_COLORMAP) != 0)
4176                     result =
4177                         png_safe_execute(image,
4178                             png_image_read_colormap, &display) &&
4179                             png_safe_execute(image,
4180                             png_image_read_colormapped, &display);
4181
4182                  else
4183                     result =
4184                        png_safe_execute(image,
4185                            png_image_read_direct, &display);
4186
4187                  png_image_free(image);
4188                  return result;
4189               }
4190
4191               else
4192                  return png_image_error(image,
4193                      "png_image_finish_read[color-map]: no color-map");
4194            }
4195
4196            else
4197               return png_image_error(image,
4198                   "png_image_finish_read: image too large");
4199         }
4200
4201         else
4202            return png_image_error(image,
4203                "png_image_finish_read: invalid argument");
4204      }
4205
4206      else
4207         return png_image_error(image,
4208             "png_image_finish_read: row_stride too large");
4209   }
4210
4211   else if (image != NULL)
4212      return png_image_error(image,
4213          "png_image_finish_read: damaged PNG_IMAGE_VERSION");
4214
4215   return 0;
4216}
4217
4218#endif /* SIMPLIFIED_READ */
4219#endif /* READ */