summaryrefslogtreecommitdiff
path: root/ext/gd/tests/bug72482_2.png
diff options
context:
space:
mode:
authorChristoph M. Becker <cmbecker69@gmx.de>2016-10-25 15:14:22 +0200
committerAnatol Belski <ab@php.net>2016-11-01 13:03:41 +0100
commit1b5543b8ab22b85c14546649057475fce2083fbd (patch)
tree0213e0a5aeb7ab858d3bfaacbb9c8a946ef5ad13 /ext/gd/tests/bug72482_2.png
parent7cf7920055d44da72529b4277e6890c99cf1932e (diff)
downloadphp-git-1b5543b8ab22b85c14546649057475fce2083fbd.tar.gz
Fix #72482: Ilegal write/read access caused by gdImageAALine overflow
Instead of rolling our own bounds check we use clip_1d() as it's done in gdImageLine() and in external libgd. We must not pass the image width and height, respectively, but rather the largest ordinate value that is allowed to be accessed, i.e. width-1 and height-1, respectively. (cherry picked from commit 6499581af76cfe986e12330faabb3a7c36d45ffc)
Diffstat (limited to 'ext/gd/tests/bug72482_2.png')
-rw-r--r--ext/gd/tests/bug72482_2.pngbin0 -> 118 bytes
1 files changed, 0 insertions, 0 deletions
diff --git a/ext/gd/tests/bug72482_2.png b/ext/gd/tests/bug72482_2.png
new file mode 100644
index 0000000000..da90b2a267
--- /dev/null
+++ b/ext/gd/tests/bug72482_2.png
Binary files differ