Test: /ext/gd/tests/bug66356.phpt - Version 5.5.22        

Security #66356 Heap Overflow Vulnerability in imagecrop()
Submitted: 2013-12-27 02:57:33 Modified: 2014-02-15 17:28:00
From: kuba.brecka Assigned: pajoye
Status: Closed Package: GD related
PHP Version: 5.5.7 OS: all

There are 2 different diffs reported by users for this test.

Count Diff
4 (80%)
011+ Parse error: imagecrop(): one parameter to a memory allocation multiplication is negative or zero, failing operation gracefully
011- Warning: imagecrop(): gd warning: one parameter to a memory allocation multiplication is negative or zero, failing operation gracefully
017+ Parse error: imagecrop(): product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully
017- Warning: imagecrop(): gd warning: product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully
1 (20%)
011+ Parse error: imagecrop(): one parameter to a memory allocation multiplication is negative or zero, failing operation gracefully
011- Warning: imagecrop(): gd warning: one parameter to a memory allocation multiplication is negative or zero, failing operation gracefully
017+ Parse error: imagecrop(): product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully
017- Warning: imagecrop(): gd warning: product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully
020+ [Tue Feb 24 19:35:24 2015] Script: %s/bug66356.php'
021+ /usr/local/src/php-5.5.22/Zend/zend_stack.c(37) : Freeing 0x2AE326E24250 (512 bytes), %s/bug66356.php
022+ Last leak repeated 2 times
023+ === Total 3 memory leaks detected ===