diff options
author | Stanislav Malyshev <stas@php.net> | 2016-04-26 22:54:58 -0700 |
---|---|---|
committer | Stanislav Malyshev <stas@php.net> | 2016-04-26 22:54:58 -0700 |
commit | 61c7a06e7c19d9b408db1129efa0959a0acbf0b1 (patch) | |
tree | 739eef45f38e0635176e678c272bbdb59047ab66 | |
parent | dccda88f27a084bcbbb30198ace12b4e7ae961cc (diff) | |
download | php-git-61c7a06e7c19d9b408db1129efa0959a0acbf0b1.tar.gz |
Fix memory leak
-rw-r--r-- | ext/gd/libgd/gd_gd2.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/ext/gd/libgd/gd_gd2.c b/ext/gd/libgd/gd_gd2.c index 1794ca9e5a..6726fee826 100644 --- a/ext/gd/libgd/gd_gd2.c +++ b/ext/gd/libgd/gd_gd2.c @@ -145,12 +145,15 @@ static int _gd2GetHeader(gdIOCtxPtr in, int *sx, int *sy, int *cs, int *vers, in cidx = gdCalloc(sidx, 1); for (i = 0; i < nc; i++) { if (gdGetInt(&cidx[i].offset, in) != 1) { + gdFree(cidx); goto fail1; } if (gdGetInt(&cidx[i].size, in) != 1) { + gdFree(cidx); goto fail1; } if (cidx[i].offset < 0 || cidx[i].size < 0) { + gdFree(cidx); goto fail1; } } |