diff options
| author | Pierre Joye <pajoye@php.net> | 2010-12-08 08:45:56 +0000 |
|---|---|---|
| committer | Pierre Joye <pajoye@php.net> | 2010-12-08 08:45:56 +0000 |
| commit | 088a6ad7b5ab5ea04af356ca8f6bb3183455eb66 (patch) | |
| tree | 66231db18b5bac542e2af94efe1bf7207b9adfba | |
| parent | 27ecaa7901ef113b9ba6b88181908354677b6042 (diff) | |
| download | php-git-088a6ad7b5ab5ea04af356ca8f6bb3183455eb66.tar.gz | |
- Fix #53492, fix crash if aa steps are invalid
| -rw-r--r-- | ext/gd/gd.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/ext/gd/gd.c b/ext/gd/gd.c index f56299977e..8c7e6b1164 100644 --- a/ext/gd/gd.c +++ b/ext/gd/gd.c @@ -4290,6 +4290,11 @@ PHP_FUNCTION(imagepstext) return; } + if (aa_steps != 4 || aa_steps != 16) { + php_error_docref(NULL TSRMLS_CC, E_WARNING, "AA steps must be 4 or 16"); + RETURN_FALSE; + } + ZEND_FETCH_RESOURCE(bg_img, gdImagePtr, &img, -1, "Image", le_gd); ZEND_FETCH_RESOURCE(f_ind, int *, &fnt, -1, "Type 1 font", le_ps_font); |