- Fix a possible crash when invalid color index are given as background

  in imagerotate, only when palette based image is used as src

diff --git a/ext/gd/libgd/gd.c b/ext/gd/libgd/gd.c
index 4aaf350c166f6f8ccd70f8c89f340115a88d817b..a2d13ec441ebe9af608aec50353e9bb7d75b8905 100644 (file)
--- a/ext/gd/libgd/gd.c
+++ b/ext/gd/libgd/gd.c
@@ -2761,6 +2761,10 @@ gdImagePtr gdImageRotate (gdImagePtr src, double dAngle, int clrBack)
                return NULL;
        }
 
+        if (!gdImageTrueColor(src) && clrBack>=gdImageColorsTotal(src)) {
+                return NULL;
+        }
+
        clrBackR = gdImageRed(src, clrBack);
        clrBackG = gdImageGreen(src, clrBack);
        clrBackB = gdImageBlue(src, clrBack);