Sdl 1.3 - segfault in SDL_image when loading indexed png

hi

i’m getting a segfault when trying to load the attached png with sdl 1.3
and SDL_image (both from HG repo - updated yesterday)

once i converted the png into rgba it loads fine.

---------------------snip-----------------------------
#0 IMG_LoadPNG_RW (src=) at IMG_png.c:523
#1 0x00007ffff6d80e8c in IMG_LoadTyped_RW (src=0x7f04800, freesrc=0,
type=0x5b5160 “png”) at IMG.c:182
---------------------snap-----------------------------

here is the relevant part of the stacktrace.
---------------------snip-----------------------------
Program received signal SIGSEGV, Segmentation fault.
IMG_LoadPNG_RW (src=) at IMG_png.c:523
523 palette->ncolors = png_num_palette;
(gdb) bt
#0 IMG_LoadPNG_RW (src=) at IMG_png.c:523
#1 0x00007ffff6d80e8c in IMG_LoadTyped_RW (src=0x7f04800, freesrc=0,
type=0x5b5160 “png”) at IMG.c:182
#2 0x000000000055495b in Img_LoadTypedImage (name=0x7fffffffe020
"pics/cursors/reactionfire", type=0x5b5160 “png”) at
src/shared/images.c:314
(gdb) p *palette
Cannot access memory at address 0x83000801
---------------------snap-----------------------------

any idea?—

gcc (Ubuntu/Linaro 4.4.4-14ubuntu5) 4.4.5
Ubuntu 10.10 amd64

-------------- next part --------------
A non-text attachment was scrubbed…
Name: reactionfire.png
Type: image/png
Size: 1301 bytes
Desc: not available
URL: http://lists.libsdl.org/pipermail/sdl-libsdl.org/attachments/20110501/3ed45117/attachment.png
-------------- next part --------------
A non-text attachment was scrubbed…
Name: config.log.sdl.bz2
Type: application/x-bzip
Size: 13776 bytes
Desc: not available
URL: http://lists.libsdl.org/pipermail/sdl-libsdl.org/attachments/20110501/3ed45117/attachment.bin
-------------- next part --------------
A non-text attachment was scrubbed…
Name: config.log.sdl_image.bz2
Type: application/x-bzip
Size: 6236 bytes
Desc: not available
URL: http://lists.libsdl.org/pipermail/sdl-libsdl.org/attachments/20110501/3ed45117/attachment-0001.bin

the bug was introduced in this revision:

err sorry. this is the last working revision:

and this revision introduced it: