MFH

diff --git a/ext/gd/gd.c b/ext/gd/gd.c
index 04ae131d2a4c4c6ef418ba2f2892968c66514e80..c11ce2979fb7ec2abb70ba0895314cb448277109 100644 (file)
--- a/ext/gd/gd.c
+++ b/ext/gd/gd.c
@@ -729,6 +729,12 @@ PHP_FUNCTION(imagecreatetruecolor)
        convert_to_long_ex(x_size);
        convert_to_long_ex(y_size);
 
+       if (Z_LVAL_PP(x_size) <= 0
+                       || Z_LVAL_PP(y_size) <= 0) {
+               php_error(E_WARNING, "invalid image dimensions");
+               RETURN_FALSE;
+       }
+       
        im = gdImageCreateTrueColor(Z_LVAL_PP(x_size), Z_LVAL_PP(y_size));
 
        ZEND_REGISTER_RESOURCE(return_value, im, le_gd);
@@ -1168,6 +1174,12 @@ PHP_FUNCTION(imagecreate)
        convert_to_long_ex(x_size);
        convert_to_long_ex(y_size);
 
+       if (Z_LVAL_PP(x_size) <= 0
+                       || Z_LVAL_PP(y_size) <= 0) {
+               php_error(E_WARNING, "invalid image dimensions");
+               RETURN_FALSE;
+       }
+
        im = gdImageCreate(Z_LVAL_PP(x_size), Z_LVAL_PP(y_size));
 
        ZEND_REGISTER_RESOURCE(return_value, im, le_gd);