Fixed bug #33210 (relax jpeg recursive loop protection).

diff --git a/ext/standard/image.c b/ext/standard/image.c
index da4ca7c7fa847720f080bbd2656cb1a8602ee51f..5e6b2371a43981e98108a1ec1d7f92330337fae2 100644 (file)
--- a/ext/standard/image.c
+++ b/ext/standard/image.c
@@ -398,7 +398,7 @@ static unsigned int php_next_marker(php_stream * stream, int last_marker, int co
                                last_marker = M_PSEUDO; /* stop skipping non 0xff for M_COM */
                        }
                }
-               if (++a > 10)
+               if (++a > 25)
                {
                        /* who knows the maxim amount of 0xff? though 7 */
                        /* but found other implementations              */