mirror of
https://github.com/php/php-src.git
synced 2026-03-24 00:02:20 +01:00
ext/gd: imagefilter* using overflow checks. (#18283)
Accept up to UINT_MAX * sizeof(int) colors.
This commit is contained in:
@@ -3599,7 +3599,7 @@ static void php_image_filter_scatter(INTERNAL_FUNCTION_PARAMETERS)
|
|||||||
RETURN_BOOL(gdImageScatter(im, (int)scatter_sub, (int)scatter_plus));
|
RETURN_BOOL(gdImageScatter(im, (int)scatter_sub, (int)scatter_plus));
|
||||||
}
|
}
|
||||||
|
|
||||||
colors = emalloc(num_colors * sizeof(int));
|
colors = safe_emalloc(num_colors, sizeof(int), 0);
|
||||||
|
|
||||||
ZEND_HASH_FOREACH_VAL(Z_ARRVAL_P(hash_colors), color) {
|
ZEND_HASH_FOREACH_VAL(Z_ARRVAL_P(hash_colors), color) {
|
||||||
*(colors + i++) = (int) zval_get_long(color);
|
*(colors + i++) = (int) zval_get_long(color);
|
||||||
|
|||||||
Reference in New Issue
Block a user