[Png-mng-security] libpng: memory overwrite (png_check_keyword()) [SuSE]

[Greg Roelofs]

> I suppose it's this one:

> version 1.2.34beta05 [December 5, 2008]
>   Removed redundant check for key==NULL before calling png_check_keyword()
>     to ensure that new_key gets initialized and removed extra warning
>     (Arvan Pritchard).

No, it's internal to png_check_keyword().  In any case, it's fixed in the
current 1.2 beta:

      (*new_key)[79] = '\0';

(It was reported in 1.0.41.)

Greg