diff options
author | Michael Drake <tlsa@netsurf-browser.org> | 2013-10-23 11:52:37 +0100 |
---|---|---|
committer | Michael Drake <tlsa@netsurf-browser.org> | 2013-10-23 11:52:37 +0100 |
commit | a515248b59d5388dae1d022fabde8b1e6ac9a004 (patch) | |
tree | c2a82c97d40f4ac257c16804a45abd9485cf36a8 | |
parent | 5cddb4ff3c270002e7b1a10b65a6af4c35bca20f (diff) | |
download | netsurf-a515248b59d5388dae1d022fabde8b1e6ac9a004.tar.gz netsurf-a515248b59d5388dae1d022fabde8b1e6ac9a004.tar.bz2 |
Fix two genuine bugs found by Coverity. Checking the wrong pointers for NULL.
-rw-r--r-- | image/png.c | 18 |
1 files changed, 8 insertions, 10 deletions
diff --git a/image/png.c b/image/png.c index 2a8334693..0f9b9cbc6 100644 --- a/image/png.c +++ b/image/png.c @@ -430,7 +430,7 @@ png_cache_convert(struct content *c) { png_structp png_ptr; png_infop info_ptr; - png_infop end_info; + png_infop end_info_ptr; volatile struct bitmap *bitmap = NULL; struct png_cache_read_data_s png_cache_read_data; png_uint_32 width, height; @@ -444,22 +444,20 @@ png_cache_convert(struct content *c) return NULL; } - png_ptr = png_create_read_struct(PNG_LIBPNG_VER_STRING, - NULL, - nspng_error, - nspng_warning); + png_ptr = png_create_read_struct(PNG_LIBPNG_VER_STRING, NULL, + nspng_error, nspng_warning); if (png_ptr == NULL) { return NULL; } info_ptr = png_create_info_struct(png_ptr); - if (png_ptr == NULL) { + if (info_ptr == NULL) { png_destroy_read_struct(&png_ptr, NULL, NULL); return NULL; } - end_info = png_create_info_struct(png_ptr); - if (png_ptr == NULL) { + end_info_ptr = png_create_info_struct(png_ptr); + if (end_info_ptr == NULL) { png_destroy_read_struct(&png_ptr, &info_ptr, NULL); return NULL; } @@ -480,7 +478,7 @@ png_cache_convert(struct content *c) nspng_setup_transforms(png_ptr, info_ptr); width = png_get_image_width(png_ptr, info_ptr); - height = png_get_image_height(png_ptr,info_ptr); + height = png_get_image_height(png_ptr, info_ptr); /* Claim the required memory for the converted PNG */ bitmap = bitmap_create(width, height, BITMAP_NEW); @@ -498,7 +496,7 @@ png_cache_convert(struct content *c) png_cache_convert_error: /* cleanup png read */ - png_destroy_read_struct(&png_ptr, &info_ptr, &end_info); + png_destroy_read_struct(&png_ptr, &info_ptr, &end_info_ptr); free((png_bytep *) row_pointers); |