# Basic usage
libspng can decode images to an explicit output format (e.g. 8/16-bit RGBA)
from any PNG format. With `SPNG_FMT_PNG` the pixel format will identical
to the PNG's format in host-endian, or big-endian with `SPNG_FMT_RAW`,
the latter does not support any transforms e.g. gamma correction.
```c
#include <spng.h>
/* Create a context */
spng_ctx *ctx = spng_ctx_new(0);
/* Set an input buffer */
spng_set_png_buffer(ctx, buf, buf_size);
/* Calculate output image size */
spng_decoded_image_size(ctx, SPNG_FMT_RGBA8, &out_size);
/* Get an 8-bit RGBA image regardless of PNG format */
spng_decode_image(ctx, SPNG_FMT_RGBA8, out, out_size, 0);
/* Free context memory */
spng_ctx_free(ctx);
```
For a complete example see [example.c](https://github.com/randy408/libspng/blob/v0.6.3/examples/example.c)
## Decoding untrusted files
To decode untrusted files safely it is required to at least:
* Set an upper image width and height limit with `spng_set_image_limits()`.
* Use `spng_decoded_image_size()` to calculate the output image size
and check it against a constant limit.
* Set a chunk size and chunk cache limit with `spng_set_chunks_limits()`
to avoid running out of memory. Note that exceeding either limit is
handled as an out-of-memory error since v0.6.0.
### Notes on memory use
The library allocates 2 to 3 times the width of the PNG image for decoding.
Gamma correction requires an additional 128KB for a lookup table if
the output format has 16-bits per channel (e.g. `SPNG_FMT_RGBA16`).