diff options
| author | Christoph M. Becker <cmb@php.net> | 2016-08-02 18:41:20 +0200 |
|---|---|---|
| committer | Christoph M. Becker <cmb@php.net> | 2016-08-02 18:43:37 +0200 |
| commit | f5622f5c8763fe180310ed7a47b999f160d7750b (patch) | |
| tree | a2d615b014650171fb228300e99c493fe49de33f /ext/standard/php_math.h | |
| parent | e95625f47ee0a8b969c268c03a33a2a67ebbefce (diff) | |
| download | php-git-f5622f5c8763fe180310ed7a47b999f160d7750b.tar.gz | |
Fix #72709: imagesetstyle() causes OOB read for empty $styles
Calling imagesetstyle() with an empty $styles array caused gdImageSetStyle()
to be called with `noOfPixels==0`, what could have lead to OOB reads.
Actually, this issue will be fixed in libgd, but to avoid issues when older
libgd is in use, we simply disallow passing an empty $styles array to
imagesetstyle(), what wouldn't serve a useful purpose anyway.
Diffstat (limited to 'ext/standard/php_math.h')
0 files changed, 0 insertions, 0 deletions