1
0
mirror of https://github.com/php/php-src.git synced 2026-04-16 20:41:18 +02:00
Files
archived-php-src/ext/gd/tests
Remi Collet af09d8b96a Fixed Bug #66815 imagecrop(): insufficient fix for NULL defer CVE-2013-7327
This amends commit 8f4a537, which aimed to correct NULL dereference because of
missing check of gdImageCreateTrueColor() / gdImageCreate() return value.  That
commit checks for negative crop rectangle width and height, but
gdImageCreate*() can also return NULL when width * height overflows.  Hence
NULL deref is still possible, as gdImageSaveAlpha() and gdImagePaletteCopy()
is called before dst == NULL check.

This moves NULL check to happen right after gdImageCreate*().  It also removes
width and height check before gdImageCreate*(), as the same check is done by
image create functions (with an extra warning).

From thoger redhat com
2014-03-05 10:40:36 +01:00
..
2006-10-10 22:37:43 +00:00
2006-05-07 16:37:40 +00:00
2006-05-08 11:50:47 +00:00
MFH
2007-02-16 11:08:22 +00:00
2007-10-26 03:19:33 +00:00
2007-11-05 01:14:31 +00:00
2006-07-17 12:54:09 +00:00
2006-07-17 12:54:09 +00:00
2006-07-17 12:54:09 +00:00
2005-12-26 18:30:33 +00:00
2006-07-17 12:54:09 +00:00
2002-12-04 21:04:07 +00:00
2002-12-04 21:04:07 +00:00
2003-06-15 19:56:40 +00:00
2002-12-04 21:04:07 +00:00
2006-07-17 12:54:09 +00:00
2006-07-17 12:54:09 +00:00
2007-05-03 12:10:11 +00:00
2006-11-03 14:51:02 +00:00
2008-07-30 09:55:20 +00:00
2013-07-09 14:51:47 -07:00
2009-09-26 16:54:08 +00:00
2009-09-26 16:54:08 +00:00
2013-02-27 21:02:47 +01:00
2008-06-21 22:07:53 +00:00
2006-07-17 12:54:09 +00:00
2005-12-17 17:46:59 +00:00
2006-07-17 12:54:09 +00:00
2006-07-17 12:54:09 +00:00