id summary reporter owner description type status priority milestone component version severity resolution keywords cc 1136 PNGDataset::Open(...) crash when it fails list672000@… warmerdam "{{{ In PNGDataset::Open(...), if ""poDS->hPNG = png_create_read_struct(...)"" results in poDS->hPNG being NULL, then there is a ""delete poDS;"" which calls ~PNGDataset (). In ~PNGDataset(), there is a ""png_destroy_read_struct(&hPNG, ...);"" which seems to crash when hPNG is NULL (using libpng-1.2.8's png_destroy_read_struct (...)). It might be crashing on the libpng's png_destroy_read_struct's ""free_fn = png_ptr->free_fn"" line. Maybe ~PNGDataset() could be changed to check if hPNG is NULL before calling png_destroy_read_struct. }}}" defect closed high GDAL_Raster unspecified normal fixed