Control: found -1 1.5-1 Hi
although the code has changed a lot after 1.5 this seem in similar form presend as well in LoadAPNG (triggerable e.g. on line 623), as ==6087==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7fac2f9ff800 at pc 0x7fac3356673c bp 0x7ffd048d8520 sp 0x7ffd048d7cd0 WRITE of size 1090585600 at 0x7fac2f9ff800 thread T0 [...] so even as heap-buffer-overflow WRITE. Updating found version accordingly. Regards, Salvatore