]> granicus.if.org Git - php/commit
Fix #77270: imagecolormatch Out Of Bounds Write on Heap
authorChristoph M. Becker <cmbecker69@gmx.de>
Sun, 30 Dec 2018 12:59:26 +0000 (13:59 +0100)
committerStanislav Malyshev <stas@php.net>
Sun, 6 Jan 2019 19:38:46 +0000 (11:38 -0800)
commit567c9f58425c37260864f276b6d3f434eecf4b49
tree68c2ac6fc008f59a7f0ec3f9ec0d3754b5732569
parent4feb9e66ff9636ad44bc23a91b7ebd37d83ddf1d
Fix #77270: imagecolormatch Out Of Bounds Write on Heap

At least some of the image reading functions may return images which
use color indexes greater than or equal to im->colorsTotal.  We cater
to this by always using a buffer size which is sufficient for
`gdMaxColors` in `gdImageColorMatch()`.
ext/gd/libgd/gd_color.c
ext/gd/tests/bug77270.phpt [new file with mode: 0644]