From a0eb5848b557f182dd041d1cc70444a832b0a928 Mon Sep 17 00:00:00 2001
From: Pierre Joye <pajoye@php.net>
Date: Wed, 8 Dec 2010 08:45:56 +0000
Subject: [PATCH] - Fix #53492, fix crash if aa steps are invalid

---
 NEWS        | 5 ++++-
 ext/gd/gd.c | 5 +++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/NEWS b/NEWS
index e129507f6e..cda4f9acfe 100644
--- a/NEWS
+++ b/NEWS
@@ -207,7 +207,10 @@
     and trailing :: in the filter extension). (Gustavo)
   . Fixed bug #50117 (problems in the validation of IPv6 addresses with IPv4
     addresses and ::). (Gustavo)
-    
+
+- GD extension:
+  . Fixed bug #53492 (fix crash if anti-aliasing steps are invalid). (Pierre)
+
 - GMP extension:
   . Fixed bug #52906 (gmp_mod returns negative result when non-negative is 
     expected). (Stas)
diff --git a/ext/gd/gd.c b/ext/gd/gd.c
index d2fd45ec91..85fb3361a8 100644
--- a/ext/gd/gd.c
+++ b/ext/gd/gd.c
@@ -4228,6 +4228,11 @@ PHP_FUNCTION(imagepstext)
 		return;
 	}
 
+	if (aa_steps != 4 || aa_steps != 16) {
+		php_error_docref(NULL TSRMLS_CC, E_WARNING, "AA steps must be 4 or 16");
+		RETURN_FALSE;
+	}
+
 	ZEND_FETCH_RESOURCE(bg_img, gdImagePtr, &img, -1, "Image", le_gd);
 	ZEND_FETCH_RESOURCE(f_ind, int *, &fnt, -1, "Type 1 font", le_ps_font);
 
-- 
2.40.0