Re: cvs: php-src(PHP_5_2) /ext/gd/libgd gd.c
| From: | Nuno Lopes | Date: | Sun, 17 Jun 2007 12:01:34 +0000 |
| Subject: | Re: cvs: php-src(PHP_5_2) /ext/gd/libgd gd.c | ||
| References: | 1 2 3 | Groups: | php.cvs |
| Request: | Send a blank email to php-cvs+get-44850@lists.php.net to get a copy of this message | ||
On 6/15/07, Stanislav Malyshev <stas@zend.com> wrote:Checks are done in gdImageCreate* --Pierre Ah, exactly. That explains why I wasn't able to crash it :-) Nuno+ pts = (char *) ecalloc(im->sy * im->sx, sizeof(char));I don't see any overflow checks around, are you sure it's safe?