- Fix #53492, fix crash if aa steps are invalid

diff --git a/ext/gd/gd.c b/ext/gd/gd.c
index f56299977e5489618516f210e40f0f926cd48aa4..8c7e6b116486c2f593f768ad90c51eed101a3400 100644 (file)
--- a/ext/gd/gd.c
+++ b/ext/gd/gd.c
@@ -4290,6 +4290,11 @@ PHP_FUNCTION(imagepstext)
                return;
        }
 
+       if (aa_steps != 4 || aa_steps != 16) {
+               php_error_docref(NULL TSRMLS_CC, E_WARNING, "AA steps must be 4 or 16");
+               RETURN_FALSE;
+       }
+
        ZEND_FETCH_RESOURCE(bg_img, gdImagePtr, &img, -1, "Image", le_gd);
        ZEND_FETCH_RESOURCE(f_ind, int *, &fnt, -1, "Type 1 font", le_ps_font);