From 88f22e13cb1917ac94a95f95f74c9ee93c5472c8 Mon Sep 17 00:00:00 2001
From: Luis Diaz Mas <piponazo@gmail.com>
Date: Tue, 25 Dec 2018 16:54:26 +0100
Subject: [PATCH] Fix ICC profile in PNG images

---
 src/pngimage.cpp | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/src/pngimage.cpp b/src/pngimage.cpp
index 90844d09..b5b0cd24 100644
--- a/src/pngimage.cpp
+++ b/src/pngimage.cpp
@@ -501,7 +501,20 @@ namespace Exiv2 {
                 }
                 else if (!memcmp(cheaderBuf.pData_ + 4, "iCCP", 4))
                 {
-                    zlibToDataBuf(cdataBuf.pData_ +12+1,dataOffset-13,iccProfile_); // +1 = 'compressed' flag
+                    // The ICC profile name can vary from 1-79 characters.
+                    uint32_t iccOffset = 0;
+                    while (iccOffset < 80 && iccOffset < dataOffset) {
+
+                        const byte* profileName = cdataBuf.pData_ + iccOffset;
+                        ++iccOffset;
+
+                        if (*profileName == 0x00)
+                            break;
+                    }
+
+                    ++iccOffset; // +1 = 'compressed' flag
+
+                    zlibToDataBuf(cdataBuf.pData_ +iccOffset,dataOffset-iccOffset,iccProfile_);
 #ifdef DEBUG
                     std::cout << "Exiv2::PngImage::readMetadata: Found iCCP chunk length: " << dataOffset  << std::endl;
                     std::cout << "Exiv2::PngImage::readMetadata: iccProfile.size_ : " << iccProfile_.size_ << std::endl;
@@ -662,6 +675,7 @@ namespace Exiv2 {
 
                         // calculate CRC
                         uLong   tmp = crc32(0L, Z_NULL, 0);
+                        tmp         = crc32(tmp, (const Bytef*)type             ,typeLen);
                         tmp         = crc32(tmp, (const Bytef*)header           ,headerLen);
                         tmp         = crc32(tmp, (const Bytef*)compressed.pData_,compressed.size_);
                         byte    crc[4];