#37360 [NEW]: imageCreateFromGIF have a memory-leak bug

From: cnteacher at discuz dot com Operating system: win32/*nix PHP version: 5CVS-2006-05-08 (snap) PHP Bug Type: GD related Bug description: imageCreateFromGIF have a memory-leak bug Description: ------------ When I use the function 'imageCreateFromGIF' with some special images (GIF), the memory will be ran out. I test it with all GD version (above 2.0.28). Reproduce code: --------------- $file = 'specialimg.gif'; $im = imagecreatefromgif($file); Expected result: ---------------- the memory ran out, and my web server is down. Actual result: -------------- I put the special gif file on my friend's web, you can download it from http://www.freediscuz.net/specialgif.zip. I think some one can use this bug to attack web server. It's so danger. -- Edit bug report at http://bugs.php.net/?id=37360&edit=1 -- Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=37360&r=trysnapshot44 Try a CVS snapshot (PHP 5.1): http://bugs.php.net/fix.php?id=37360&r=trysnapshot51 Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=37360&r=trysnapshot52 Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=37360&r=trysnapshot60 Fixed in CVS: http://bugs.php.net/fix.php?id=37360&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=37360&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=37360&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=37360&r=needscript Try newer version: http://bugs.php.net/fix.php?id=37360&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=37360&r=support Expected behavior: http://bugs.php.net/fix.php?id=37360&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=37360&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=37360&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=37360&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=37360&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=37360&r=dst IIS Stability: http://bugs.php.net/fix.php?id=37360&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=37360&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=37360&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=37360&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=37360&r=mysqlcfg