#33220 [Asn]: Denial of service through imagecreatefromgif()
| From: | sniper@php.net | Date: | Mon, 22 Aug 2005 15:45:43 +0000 |
| Subject: | #33220 [Asn]: Denial of service through imagecreatefromgif() | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-83871@lists.php.net to get a copy of this message | ||
ID: 33220
Updated by: sniper@php.net
Reported By: phpbugs at pureftpd dot org
Status: Assigned
Bug Type: GD related
Operating System: *
PHP Version: 5CVS-2005-08-17
Assigned To: pajoye
New Comment:
Pierre, are you going to do something for this bug?
Previous Comments:
------------------------------------------------------------------------
[2005-06-02 15:11:16] phpbugs at pureftpd dot org
Description:
------------
The following (invalid) picture triggers an infinite loop
in gdImageCreateFromGif() with 100% CPU usage.
Tested on Linux and OpenBSD, PHP4 with GD 1 and PHP5 with
built-in GD.
Reproduce code:
---------------
<?php
imagecreatefromgif('kaboom-gd.gif');
?>
Get kaboom-gd.gif from ftp://ftp.00f.net/misc/kaboom-gd.gif
Expected result:
----------------
No 100% CPU usage.
Actual result:
--------------
100% CPU usage, infinite loop.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=33220&edit=1