diff options
| author | Stanislav Malyshev <stas@php.net> | 2016-04-26 22:54:58 -0700 |
|---|---|---|
| committer | Anatol Belski <ab@php.net> | 2016-04-27 12:54:09 +0200 |
| commit | 136689d17bce8bb736ad2d784f4fe79881f9a70f (patch) | |
| tree | 5de1ed97bb7328c9d75e0747c55e640a996be043 | |
| parent | 1248079be837808da4c97364fb3b4c96c8015fbf (diff) | |
| download | php-git-136689d17bce8bb736ad2d784f4fe79881f9a70f.tar.gz | |
Fix memory leak
| -rw-r--r-- | ext/gd/libgd/gd_gd2.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/ext/gd/libgd/gd_gd2.c b/ext/gd/libgd/gd_gd2.c index 1794ca9e5a..6726fee826 100644 --- a/ext/gd/libgd/gd_gd2.c +++ b/ext/gd/libgd/gd_gd2.c @@ -145,12 +145,15 @@ static int _gd2GetHeader(gdIOCtxPtr in, int *sx, int *sy, int *cs, int *vers, in cidx = gdCalloc(sidx, 1); for (i = 0; i < nc; i++) { if (gdGetInt(&cidx[i].offset, in) != 1) { + gdFree(cidx); goto fail1; } if (gdGetInt(&cidx[i].size, in) != 1) { + gdFree(cidx); goto fail1; } if (cidx[i].offset < 0 || cidx[i].size < 0) { + gdFree(cidx); goto fail1; } } |