diff options
| author | Christoph M. Becker <cmbecker69@gmx.de> | 2017-08-24 12:39:45 +0200 |
|---|---|---|
| committer | Christoph M. Becker <cmbecker69@gmx.de> | 2017-08-24 14:07:10 +0200 |
| commit | 5cd348c1d606b890abae076a38e47effcfda79be (patch) | |
| tree | 5e5bd768ef68311a08d1b7fe49fbc8c441840e1d /ext/sodium | |
| parent | cf6f25bd37f2dc36f1443f07406a89040c50db65 (diff) | |
| download | php-git-5cd348c1d606b890abae076a38e47effcfda79be.tar.gz | |
Fixed bug #75111 (Memory disclosure or DoS via crafted .bmp image)
Crafted BMP images can cause dynamicSeek() to be called with a negative
position which must not be allowed, since dynamicSeek() works like
fseek() in SEEK_SET mode. We solve this by bailing out if `pos` is
negative, and let the image reading fail gracefully.
Diffstat (limited to 'ext/sodium')
0 files changed, 0 insertions, 0 deletions