src/cr-input.c | 11 9 + 2 - 0 !
1 file changed, 9 insertions(+), 2 deletions(-)

 input: check end of input before reading a byte

When reading bytes we weren't check that the index wasn't
out of bound and this could produce an invalid read which
could deal to a security bug.

src/cr-tknzr.c | 10 10 + 0 - 0 !
1 file changed, 10 insertions(+)

 tknzr: support only max long rgb values

This fixes a possible out of bound when reading rgbs which
are longer than the support MAXLONG