MFH

diff --git a/ext/gd/gd.c b/ext/gd/gd.c
index 35624f3dd02d5851a66b2ca855b50a9b0474431b..3034fe83df0189898dd85f32e75361858b5a0405 100644 (file)
--- a/ext/gd/gd.c
+++ b/ext/gd/gd.c
@@ -2861,6 +2861,11 @@ PHP_FUNCTION(imagecopyresized)
        dstY = Z_LVAL_PP(DY);
        dstH = Z_LVAL_PP(DH);
        dstW = Z_LVAL_PP(DW);
+       
+       if (dstW < 0 || dstH < 0 || srcW < 0 || srcH < 0) {
+               php_error_docref(NULL TSRMLS_CC, E_WARNING, "Invalid image dimensions");
+               RETURN_FALSE;
+       }
 
        gdImageCopyResized(im_dst, im_src, dstX, dstY, srcX, srcY, dstW, dstH, srcW, srcH);
        RETURN_TRUE;