Bug #73504 [Nab]: System frozen - DOS

Edit report at https://bugs.php.net/bug.php?id=73504&edit=1 ID: 73504 Updated by: cmb@php.net Reported by: honor dot ston3 at gmail dot com Summary: System frozen - DOS Status: Not a bug Type: Bug Package: GD related Operating System: *nix PHP Version: 5.6.28 Assigned To: cmb Block user comment: N Private report: N New Comment: I had tested your script with the payload with PHP's bundled libgd, and this is not affected, so this is not a bug in PHP. It is, of course, a bug in libgd, what I've already acknowledged[1]. [1] <https://github.com/libgd/libgd/issues/340> Previous Comments: ------------------------------------------------------------------------ [2016-11-12 13:54:33] honor dot stone3 at gmail dot com NOT A BUG? :) My test script: <?php $png = imagecreatefromgd2($argv[1]); imagegif($png, './php.gif'); imagedestroy($png); ?> Please try above code with my payload. Why closed ticket? Try please. ------------------------------------------------------------------------ [2016-11-12 13:28:28] cmb@php.net This is solely a libgd issue, and PHP's bundled libgd is not affected, so I'm closing this ticket as not-a-bug. ------------------------------------------------------------------------ [2016-11-12 10:56:59] cmb@php.net Also reported as <https://github.com/libgd/libgd/issues/340>. ------------------------------------------------------------------------ [2016-11-12 10:21:41] honor dot ston3 at gmail dot com Description: ------------ Hello, I tested below code and system frozen. System bloked. DOS ... Pls contact me for payload file. Author: Onur TAŞLIOĞLU Test script: --------------- <?php $png = imagecreatefromgd2($argv[1]); imagegif($png, './php.gif'); imagedestroy($png); ?> ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=73504&edit=1