Test: /ext/gd/tests/bug66356.phpt - Version 5.6.2        

Security #66356 Heap Overflow Vulnerability in imagecrop()
Submitted: 2013-12-27 02:57:33 Modified: 2014-02-15 17:28:00
From: kuba.brecka Assigned: pajoye
Status: Closed Package: GD related
PHP Version: 5.5.7 OS: all

There are 3 different diffs reported by users for this test.

Count Diff
8 (80%)
011+ Parse error: imagecrop(): one parameter to a memory allocation multiplication is negative or zero, failing operation gracefully
011- Warning: imagecrop(): gd warning: one parameter to a memory allocation multiplication is negative or zero, failing operation gracefully
017+ Parse error: imagecrop(): product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully
017- Warning: imagecrop(): gd warning: product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully
1 (10%)
011+ Parse error: imagecrop(): one parameter to a memory allocation multiplication is negative or zero, failing operation gracefully
011- Warning: imagecrop(): gd warning: one parameter to a memory allocation multiplication is negative or zero, failing operation gracefully
017+ Parse error: imagecrop(): product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully
017- Warning: imagecrop(): gd warning: product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully
020+ [Sat Jun 13 14:16:33 2015] Script: %s/bug66356.php'
021+ /data/source/php-5.6.2/Zend/zend_stack.c(37) : Freeing 0x7FD8A4E91250 (512 bytes), %s/bug66356.php
022+ Last leak repeated 2 times
023+ === Total 3 memory leaks detected ===
1 (10%)
011+ Parse error: imagecrop(): one parameter to a memory allocation multiplication is negative or zero, failing operation gracefully
011- Warning: imagecrop(): gd warning: one parameter to a memory allocation multiplication is negative or zero, failing operation gracefully
017+ Parse error: imagecrop(): product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully
017- Warning: imagecrop(): gd warning: product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully
020+ [Mon Nov 10 04:39:55 2014] Script: %s/bug66356.php'
021+ /usr/local/src/web/php/php-5.6.2/Zend/zend_stack.c(37) : Freeing 0x40870768 (256 bytes), %s/bug66356.php
022+ Last leak repeated 2 times
023+ === Total 3 memory leaks detected ===