]> granicus.if.org Git - php/commit
Fix #73280: Stack Buffer Overflow in GD dynamicGetbuf
authorChristoph M. Becker <cmbecker69@gmx.de>
Thu, 13 Oct 2016 09:10:02 +0000 (11:10 +0200)
committerChristoph M. Becker <cmbecker69@gmx.de>
Thu, 13 Oct 2016 09:10:02 +0000 (11:10 +0200)
commitcc08cbc84d46933c1e9e0149633f1ed5d19e45e9
tree7cb5762821bae03e18ad9a64b5c1ec6a7c75be80
parent43ccf23d700ae780451e257f5a66d4210f82f026
Fix #73280: Stack Buffer Overflow in GD dynamicGetbuf

We make sure to never pass a negative `rlen` as size to memcpy().

Cf. <https://github.com/libgd/libgd/commit/53110871>.
NEWS
ext/gd/libgd/gd_io_dp.c