diff options
Diffstat (limited to 'tests/gif')
| -rw-r--r-- | tests/gif/.gitignore | 1 | ||||
| -rw-r--r-- | tests/gif/CMakeLists.txt | 1 | ||||
| -rw-r--r-- | tests/gif/Makemodule.am | 1 | ||||
| -rw-r--r-- | tests/gif/bug00499.c | 51 |
4 files changed, 54 insertions, 0 deletions
diff --git a/tests/gif/.gitignore b/tests/gif/.gitignore index 6eb643c..1b07664 100644 --- a/tests/gif/.gitignore +++ b/tests/gif/.gitignore @@ -5,6 +5,7 @@ /bug00066 /bug00181 /bug00227 +/bug00499 /gif_im2im /gif_null /ossfuzz5700 diff --git a/tests/gif/CMakeLists.txt b/tests/gif/CMakeLists.txt index e58e6b0..cb2c940 100644 --- a/tests/gif/CMakeLists.txt +++ b/tests/gif/CMakeLists.txt @@ -2,6 +2,7 @@ LIST(APPEND TESTS_FILES bug00005_2 bug00181 bug00227 + bug00499 gif_null ossfuzz5700 php_bug_75571 diff --git a/tests/gif/Makemodule.am b/tests/gif/Makemodule.am index 5dbeac5..13c7ed7 100644 --- a/tests/gif/Makemodule.am +++ b/tests/gif/Makemodule.am @@ -2,6 +2,7 @@ libgd_test_programs += \ gif/bug00005_2 \ gif/bug00181 \ gif/bug00227 \ + gif/bug00499 \ gif/gif_null \ gif/ossfuzz5700 \ gif/php_bug_75571 \ diff --git a/tests/gif/bug00499.c b/tests/gif/bug00499.c new file mode 100644 index 0000000..0fedb92 --- /dev/null +++ b/tests/gif/bug00499.c @@ -0,0 +1,51 @@ +/** + * Test that adding identical images to GIF animations do no double-free + * + * We are adding two frames to a GIF animation in gdDisposalNone mode, were the + * second frame is identical to the first, which result in that image to have + * zero extent. This program must not cause any memory issues. + * + * See also <https://github.com/libgd/libgd/issues/499>. + */ + + +#include "gd.h" +#include "gdtest.h" + + +int main() +{ + gdImagePtr im; + int black; + int size; + void * res; + + im = gdImageCreate(100, 100); + black = gdImageColorAllocate(im, 0, 0, 0); + gdImageRectangle(im, 0, 0, 10, 10, black); + + res = gdImageGifAnimBeginPtr(im, &size, 1, 3); + if (res != NULL) { + gdFree(res); + } + + res = gdImageGifAnimAddPtr(im, &size, 0, 0, 0, 100, gdDisposalNone, NULL); + if (res != NULL) { + gdFree(res); + } + + res = gdImageGifAnimAddPtr(im, &size, 0, 0, 0, 100, gdDisposalNone, im); + gdTestAssert(res == NULL); + if (res != NULL) { + gdFree(res); + } + + res = gdImageGifAnimEndPtr(&size); + if (res != NULL) { + gdFree(res); + } + + gdImageDestroy(im); + + return gdNumFailures(); +} |