From 925bc0fd7d04ae2ee784b5f2e5932f948f6800a1 Mon Sep 17 00:00:00 2001 From: Ilia Alshanetsky Date: Fri, 4 Apr 2003 00:16:47 +0000 Subject: [PATCH] Fix segfault in imagecopyresized(). --- ext/gd/gd.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/ext/gd/gd.c b/ext/gd/gd.c index 605b829de4..d4b771454d 100644 --- a/ext/gd/gd.c +++ b/ext/gd/gd.c @@ -2946,6 +2946,11 @@ PHP_FUNCTION(imagecopyresized) dstY = Z_LVAL_PP(DY); dstH = Z_LVAL_PP(DH); dstW = Z_LVAL_PP(DW); + + if (dstW < 0 || dstH < 0 || srcW < 0 || srcH < 0) { + php_error_docref(NULL TSRMLS_CC, E_WARNING, "Invalid image dimensions"); + RETURN_FALSE; + } gdImageCopyResized(im_dst, im_src, dstX, dstY, srcX, srcY, dstW, dstH, srcW, srcH); RETURN_TRUE; -- 2.50.1