Description:
------------
Hi all,

I found a bug in this extension. It will cause php to crash with a segfault. I've tracked it down to the imageid in ps_place_image(). zend_parse_parameters() was loading a long into an int. I've made a patch to fix this.

--- ps.c.orig   2007-11-27 20:40:14.000000000 +1100
+++ ps.c        2008-06-03 02:07:28.000000000 +1000
@@ -1302,7 +1302,7 @@
        zval *zps;
        char *type, *filename, *image, *stringparam = NULL;
        int type_len, filename_len, stringparam_len;
-       int imageid, intparam = 0;
+       long imageid;
+       intparam = 0;
        PSDoc *ps;

        if (FAILURE == zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "rss|sl", &zps, &type, &type_len, &filename, &filename_len, &stringparam, &stringparam_len, &intparam)) {
@@ -1333,7 +1333,7 @@
 {
        zval **arg1, **arg2;
        int i, j, color, count;
-       int imageid;
+       long imageid;
        gdImagePtr im;
        unsigned char *buffer, *ptr;
        PSDoc *ps;
@@ -1399,7 +1399,7 @@
 PHP_FUNCTION(ps_close_image)
 {
        zval *zps;
-       int imageid;
+       long imageid;
        PSDoc *ps;

        if (FAILURE == zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "rl", &zps, &imageid)) {
@@ -1408,7 +1408,7 @@

        PSDOC_FROM_ZVAL(ps, &zps);

-       PS_close_image(ps, imageid);
+       PS_close_image(ps, (int) imageid);
 }
 /* }}} */

@@ -1417,7 +1417,7 @@
 PHP_FUNCTION(ps_place_image)
 {
        zval *zps;
-       int imageid;
+       long imageid;
        double x, y, scale;
        PSDoc *ps;

@@ -1427,7 +1427,7 @@

        PSDOC_FROM_ZVAL(ps, &zps);

-       PS_place_image(ps, imageid, (float) x, (float) y, (float) scale);
+       PS_place_image(ps, (int) imageid, (float) x, (float) y, (float) scale);

        RETURN_TRUE;
 }
@@ -1778,7 +1778,7 @@
        zval **arg1, **arg2, **arg3, **arg4, **arg5, **arg6, **arg7;
        PSDoc *ps;
        char *image;
-       int imageid;
+       long imageid;

        if (ZEND_NUM_ARGS() != 7 || zend_get_parameters_ex(7, &arg1, &arg2, &arg3, &arg4, &arg5, &arg6, &arg7) == FAILURE) {
                WRONG_PARAM_COUNT;
@@ -1819,7 +1819,7 @@
        char *type, *params, *source, *data;
        int type_len, params_len, source_len, data_len;
        int length, width, height, components, bpc;
-       int imageid;
+       long imageid;
        char *image;
        PSDoc *ps;

@@ -2039,7 +2039,7 @@
  * Add an existing image as thumbnail for the current page. */
 PHP_FUNCTION(ps_add_thumbnail) {
        zval *zps;
-       int imageid;
+       long imageid;
        PSDoc *ps;

        if (FAILURE == zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "rl", &zps, &imageid)) {
@@ -2048,7 +2048,7 @@

        PSDOC_FROM_ZVAL(ps, &zps);

-       PS_add_thumbnail(ps, imageid);
+       PS_add_thumbnail(ps, (int) imageid);

        RETURN_TRUE;
 } /* }}} */