Commit 811e1d0

committed

Fix GH-19751: imagefill buffer overflow.

1 parent 93865a4 commit 811e1d0Copy full SHA for 811e1d0

File tree

-0

lines changed

-0

lines changed

Lines changed: 3 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -2043,6 +2043,9 @@ static void _gdImageFillTiled(gdImagePtr im, int x, int y, int nc)`
`2043`	`2043`	`FILL_PUSH(y+1, x, x, -1);`
`2044`	`2044`	`while (sp>stack) {`
`2045`	`2045`	`FILL_POP(y, x1, x2, dy);`
	`2046`	`+ if (y > im->sy \|\| x > im->sx) {`
	`2047`	`+ goto skip;`
	`2048`	`+ }`
`2046`	`2049`	`for (x=x1; x>=0 && (!pts[y][x] && gdImageGetPixel(im,x,y)==oc); x--) {`
`2047`	`2050`	`nc = gdImageTileGet(im,x,y);`
`2048`	`2051`	`pts[y][x] = 1;`

Comments

(0)