php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #32775 PHP crashes with a segmentation fault on GD2 function
Submitted: 2005-04-20 11:46 UTC Modified: 2005-04-20 17:08 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:1 (100.0%)
Same OS:1 (100.0%)
From: dirk dot msc at gmx dot de Assigned:
Status: Not a bug Package: GD related
PHP Version: 5.0.4 OS: Linux
Private report: No CVE-ID: None
View Developer Edit
 [2005-04-20 11:46 UTC] dirk dot msc at gmx dot de 
Description:
------------
The following script produces a segmentation fault on Linux whereas it works perfectly on Windows.
You can find the image here: http://www.hdx4.com/neu/images/buttons/templates/border_top.gif

Please download it as the URL may change.

Reproduce code:
---------------
  $img = @imagecreatetruecolor (100, 21) or die ("Cannot Initialize new GD image stream");
  $col_white=imagecolorallocate($img, 0xFF, 0xFF, 0xFF);
  imagefill($img, 0,0, $col_white);

  $top=@imagecreatefromgif("border_top.gif");
//  $top=@imagecreatefrompng("default.png");  // if I use this one it works

  if ($top) {
    imagesettile($img, $top);
    imagefill($img, 0,0, IMG_COLOR_TILED);
  }
  
  header ("Content-type: image/png");
  imagepng($img);
  imagedestroy($img);
  imagedestroy($top);

Expected result:
----------------
Anything, but not a crash.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2005-04-20 11:49 UTC] derick@php.net 
Thank you for this bug report. To properly diagnose the problem, we
need a backtrace to see what is happening behind the scenes. To
find out how to generate a backtrace, please read
http://bugs.php.net/bugs-generating-backtrace.php

Once you have generated a backtrace, please submit it to this bug
report and change the status back to "Open". Thank you for helping
us make PHP better.
 [2005-04-20 16:46 UTC] dirk dot msc at gmx dot de 
Note: This does not happen with the Windows version of PHP5.

Backtracking the core dump with gdb indicates a crash in the gdImageFill () function.
 [2005-04-20 16:51 UTC] derick@php.net 
Please provide that backtrace as we requested...
 [2005-04-20 17:05 UTC] dirk dot msc at gmx dot de 
Backtracing outputs:

#0  0x400a2755 in gdImageSetPixel ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#1  0x400a2257 in gdImageSetPixel ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#2  0x400a3e3c in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#3  0x400a3f54 in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#4  0x400a3ff8 in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#5  0x400a3f54 in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#6  0x400a3ff8 in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#7  0x400a3f54 in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#8  0x400a3ff8 in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#9  0x400a3f54 in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#10 0x400a3ff8 in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#11 0x400a3f54 in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#12 0x400a3ff8 in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#13 0x400a3f54 in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#14 0x400a3ff8 in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
#15 0x400a3f54 in gdImageFill ()
   from /usr/local/gd-2.0.15-gif/lib/libgd.so.2
...

This goes on up to about 16,000.
 [2005-04-20 17:08 UTC] sniper@php.net 
It's pretty likely that this is a GD bug which we have fixed in the bundled version of ours. The latest GD release is 2.0.33 btw..

Either update the external GD lib or use the bundled one.
(--with-gd without path)
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Sat Nov 22 00:00:01 2025 UTC