Test: /ext/gd/tests/bug72339.phpt - Version 7.0.8        

Security #72339 Integer Overflow in _gd2GetHeader() resulting in heap overflow
Submitted: 2016-06-05 23:49:54 Modified: 2016-06-23 12:33:07
From: gogil Assigned: pajoye
Status: Closed Package: GD related
PHP Version: 5.5.36 OS:

There are 3 different diffs reported by users for this test.

Count Diff
9 (82%)
001+ Termsig=11
001- Warning: imagecreatefromgd2(): gd warning: product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully
002- in %sbug72339.php on line %d
003-
004- Warning: imagecreatefromgd2(): '%sbug72339.gd' is not a valid GD2 file in %sbug72339.php on line %d
1 (9%)
001- Warning: imagecreatefromgd2(): gd warning: product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully
002- in %sbug72339.php on line %d
004- Warning: imagecreatefromgd2(): '%sbug72339.gd' is not a valid GD2 file in %sbug72339.php on line %d
1 (9%)
001+ Segmentation fault (core dumped)
001- Warning: imagecreatefromgd2(): gd warning: product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully
002- in %sbug72339.php on line %d
003+ Termsig=11
004- Warning: imagecreatefromgd2(): '%sbug72339.gd' is not a valid GD2 file in %sbug72339.php on line %d