PHP :: Bug #37346 :: gd have a danger bug

Bug #37346

gd have a danger bug

Submitted:

2006-05-07 06:42 UTC

Modified:

2006-05-07 17:23 UTC

Votes:	4
Avg. Score:	5.0 ± 0.0
Reproduced:	4 of 4 (100.0%)
Same Version:	0 (0.0%)
Same OS:	0 (0.0%)

From:

zq dot hkrcn at gmail dot com

Assigned:

pajoye (profile)

Status:

Closed

Package:

GD related

PHP Version:

5.1.4

OS:

Windows 2000

Private report:

CVE-ID:

None

View Developer Edit

[2006-05-07 06:42 UTC] zq dot hkrcn at gmail dot com

Description:
------------
gd (ver 2.0.28) have a danger bug

a error image can pass php's test
but it would make a fatal error

other question:Could you tell me if you deal with bug report in Chinese?

i'm chinese
my english is very poor
here's the bug report in Chinese:

&#24403;&#26377;&#24694;&#24847;&#30340;&#29992;&#25143;&#25552;&#20132;&#19968;&#20010;&#38169;&#35823;&#30340;&#22270;&#20687;&#25991;&#20214;
&#36825;&#20010;&#25991;&#20214;&#30340;&#25991;&#20214;&#22836;&#26159;&#27491;&#30830;&#30340;&#65292;&#20294;&#20027;&#20307;&#26159;&#38169;&#35823;&#30340;&#65292;&#27809;&#26377;&#32467;&#26463;
&#25552;&#20132;&#19978;&#21435;&#20197;&#21518;&#65292;&#23601;&#20250;&#24341;&#36215; php &#30340;&#33268;&#21629;&#38169;&#35823;
www &#26381;&#21153;&#20250;&#20572;&#27490;

&#21478;&#22806;&#38382;&#19968;&#19979;&#65306;&#29992;&#20013;&#25991;&#25253;&#21578;&#20250;&#19981;&#20250;&#22788;&#29702;&#30340;&#65311;

Reproduce code:
---------------
<?php
$file = 'http://dev.hkrcn.com/testimg.gif';
$im = imagecreatefromgif($file);  // here a fatal error

Expected result:
----------------
cause a error,then stop running

Actual result:
--------------
memory-leak

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports

[2006-05-07 06:51 UTC] cnstudentmail at Gmail dot com

i have the same problem.
i think it's a very danger bug because a lots of server is using gd.

[2006-05-07 10:03 UTC] derick@php.net

We really need a report in english... many people here don't speak any chinese.

[2006-05-07 12:50 UTC] pajoye@php.net

I confirmed the problem, but there is in fact no error messages from php.

[2006-05-07 17:23 UTC] pajoye@php.net

This bug has been fixed in CVS.

Snapshots of the sources are packaged every three hours; this change
will be in the next snapshot. You can grab the snapshot at
http://snaps.php.net/.
 
Thank you for the report, and for helping us make PHP better.

Fixed in all branches.

	php.net \| support \| documentation \| report a bug \| advanced search \| search howto \| statistics \| random bug \| login
go to bug id or search bugs for


Copyright © 2001-2024 The PHP Group All rights reserved.	Last updated: Sat Dec 21 12:01:31 2024 UTC