The bug was found with American Fuzzy Lop from optipng (
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787647) and later the optipng author noticed that the same bug also affects libpng (
http://sourceforge.net/p/png-mng/mailman/png-mng-implement/t...)