19 lines
534 B
Plaintext
19 lines
534 B
Plaintext
$NetBSD: patch-ad,v 1.1 2009/10/22 14:39:55 taca Exp $
|
|
|
|
* Fix for http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546,
|
|
similar chagne from PHP's SVN repositry r289557.
|
|
|
|
--- gd_gd.c.orig 2006-04-06 00:52:22.000000000 +0900
|
|
+++ gd_gd.c
|
|
@@ -44,6 +44,10 @@ _gdGetColors (gdIOCtx * in, gdImagePtr i
|
|
{
|
|
goto fail1;
|
|
}
|
|
+ if (im->colorsTotal > gdMaxColors)
|
|
+ {
|
|
+ goto fail1;
|
|
+ }
|
|
}
|
|
/* Int to accommodate truecolor single-color transparency */
|
|
if (!gdGetInt (&im->transparent, in))
|