Announcement

Collapse
No announcement yet.

libpng security vulnerability

Collapse
This is a sticky topic.
X
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    #16
    Hi There!
    Big on going problem this is. I myself have Blueprint Project and experience the same problems. As far as i now when you don't work with C++ you don't have to recompile or am i wrong? if zo how do you recompile a BP type project?
    Android keeps on rejecting my project so please let me know what i do wrong because i have replaced the files as described above.
    thx for any replays!

    Comment


      #17
      To get this to work you need to get the ue4 source from github. https://github.com/EpicGames/UnrealEngine If you've not done this before you'll need to link github account to your epic account.

      On the unrealengine github page click "clone or download" and choose download ZIP. Once downloaded and unzipped you need to download https://epicgames.app.box.com/s/abvk...39sudi9y6uosvb and unzip into the same directory to overwrite problem files.

      Compile UE4 using instruction on the github page I linked above. I'd never done this myself until a few days ago but it was a fairly painless process.

      Comment


        #18
        Originally posted by Chris Babcock View Post
        4.13.1 was already completing testing when this came up.

        If you have source from GitHub, you can use this ZIP update to get the new libpng version with prebuilt Android libraries: https://epicgames.app.box.com/s/abvk...39sudi9y6uosvb

        This should work with 4.12.x and 4.13.x as-is; let me know if there are any problems with older releases.
        There are a few linking errors when building x86 and x86_64 APKs. To fix it, the Android.mk file in the zip needs to be modified like this:

        Find this line:

        Code:
        LOCAL_CFLAGS := -O2 -Os -DNDEBUG -fomit-frame-pointer -g0
        And add this right bellow it:

        Code:
        ifeq ($(TARGET_ARCH_ABI),x86)
        	LOCAL_CFLAGS += -fno-stack-protector
        endif
        ifeq ($(TARGET_ARCH_ABI),x86_64)
        	LOCAL_CFLAGS += -fno-stack-protector
        endif
        Then run "BuildForAndroid.bat" to re-compile the libPNG Android libraries.

        The problem is caused UE4 uses the "stack-protector" compiler flag on arm7 and arm64 builds but not on x86/x86_64 ones, while libPNG was compiled with that flag for all architectures, causing linker conflicts.

        Comment


          #19
          Thank you for the report. I've made the changes and rebuilt the libraries. The link above has been updated. You only need the new one if you want to target x86 or x86_64 architectures.
          Last edited by Chris Babcock; 10-12-2016, 12:53 PM.

          Comment


            #20
            Originally posted by SalihBalkan View Post
            +1 for fix in 4.13.2
            +1 for fix in 4.13.2

            Comment


              #21
              Hi everyone, we have provided the binary fix for this issue as a QFE ("quick-fix") which you can download and run from here: https://forums.unrealengine.com/show...-Fix-Solutions

              Cheers
              Stephen Ellis | Senior Engine Coordinator

              Comment


                #22
                Originally posted by Chris Babcock View Post
                4.13.1 was already completing testing when this came up.

                If you have source from GitHub, you can use this ZIP update to get the new libpng version with prebuilt Android libraries:

                Updated (x86 and x86_64 libraries corrected):
                https://epicgames.app.box.com/s/29cq...btgqfrk5f51t4a



                This should work with 4.12.x and 4.13.x as-is; let me know if there are any problems with older releases.

                Hi there! Here's my problem... I publish an android game with this new libPNG with API 19 and I've notice that some textures are not showing during game. Sometimes the texture is loaded, sometimes not. If I use the API 21 all the textures become visible. I've already try to increase the memory poolsize and a bunch of other things. Is there a minimum API to use this lib? It's a bug? I'm stuck here trying to solve this issue. If you have something to help me, I will be thankful.
                By the way, worked for me with 4.13 and 4.11 to.
                Maico G.
                http://ttkstudios.x10.mx
                @maicogirardi
                youtube.com/maicogir
                maicogirardi.wix.com/portfolio
                https://game-development.zeef.com/maico.girardi

                Comment


                  #23
                  libpng is not used for any textures unless you are using ImageWrapper so it should not cause this. Please create an AnswerHub for this issue.

                  Comment


                    #24
                    Originally posted by Chris Babcock View Post
                    libpng is not used for any textures unless you are using ImageWrapper so it should not cause this. Please create an AnswerHub for this issue.
                    I'll do that! Thank you!
                    Maico G.
                    http://ttkstudios.x10.mx
                    @maicogirardi
                    youtube.com/maicogir
                    maicogirardi.wix.com/portfolio
                    https://game-development.zeef.com/maico.girardi

                    Comment


                      #25
                      Originally posted by Stephen Ellis View Post
                      Hi everyone, we have provided the binary fix for this issue as a QFE ("quick-fix") which you can download and run from here: https://forums.unrealengine.com/show...-Fix-Solutions

                      Cheers
                      Big thanks for the QFE, it will help our project move forward.

                      Comment


                        #26
                        I tried the QFE patch that was posted, but my app is still being rejected for the same reason. Any help?

                        Comment


                          #27
                          4.13.2 includes the update; this would be the preferred way to update 4.13 if you aren't using GitHub.

                          Comment


                            #28
                            hi, i need help with my app. if someone can help me .I would be very grateful. i must finih project today. sms android app. is anyone intrested to help me

                            Comment


                              #29
                              Hi!
                              I am using 4.12.5 and I am very close to my release date. Update Unreal is not really a good option for me since I am using third party plugins and last update was a disaster.

                              Is there any procedure to fix this problem for 4.12.5 launcher version?

                              My project is completely done in blueprints. I am a 3d artist, not a programmer and I've never used UE4 source from github.

                              Thank you very much!

                              Now on Google Play!

                              Comment


                                #30
                                So 4.13.2 launcher version is allready contains update?

                                Comment

                                Working...
                                X