MFH: Fixed bug #24155 (gdImageRotate270 incorrectly use x parameter for y axis)

diff --git a/NEWS b/NEWS
index 2757935c07d61625b45769e7022d0fd9f04cb976..886172e82a430711255da659fb3a888e6d7a5577 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -24,6 +24,8 @@ PHP 4                                                                      NEWS
   (Adam Dickmeiss)
 - Fixed a bug in bundled libmysql (mysql bug #564). (Georg)
 - Fixed ext/exif to honor "magic_quotes_runtime" php.ini option. (Marcus)
+- Fixed bug #24155 (gdImageRotate270 incorrectly use x parameter for y axis).
+  (tom@gksystems.com, Ilia)
 - Fixed bug #24060 (ncurses_del_panel() causes segfault). (Georg)
 - Fixed bug #24054 (Integer overflow failure with GCC/x86 for *=). (Sascha)
 - Fixed bug #23951 (constants in static initializers clobbered by inheritance).

diff --git a/ext/gd/libgd/gd.c b/ext/gd/libgd/gd.c
index 5ca0efad9ab3e2053a4afdff95e1d46cd6977d4c..fba4d1841ffda9fab8535fa75aaa25d1b53a3493 100644 (file)
--- a/ext/gd/libgd/gd.c
+++ b/ext/gd/libgd/gd.c
@@ -2613,7 +2613,7 @@ gdImagePtr gdImageRotate270 ( gdImagePtr src )
        if (dst != NULL) {
                gdImagePaletteCopy (dst, src);
                
-               for (uY = 0; uY<src->sx; uY++) {
+               for (uY = 0; uY<src->sy; uY++) {
                        for (uX = 0; uX<src->sx; uX++) {
                                c = f (src, uX, uY);
                                gdImageSetPixel(dst, (dst->sx - uY - 1), uX, c);