cvs: gd(GD_2_0) /libgd NEWS gd_gif_in.c

pajoye		Fri Jun  8 05:21:25 2007 UTC

  Modified files:              (Branch: GD_2_0)
    /gd/libgd	gd_gif_in.c NEWS 
  Log:
  - #87, fix segfault when an invalid color index is present in the 
    image data
  
  
http://cvs.php.net/viewvc.cgi/gd/libgd/gd_gif_in.c?r1=1.5.2.6&r2=1.5.2.7&diff_format=u
Index: gd/libgd/gd_gif_in.c
diff -u gd/libgd/gd_gif_in.c:1.5.2.6 gd/libgd/gd_gif_in.c:1.5.2.7
--- gd/libgd/gd_gif_in.c:1.5.2.6	Wed Apr  4 11:33:42 2007
+++ gd/libgd/gd_gif_in.c	Fri Jun  8 05:21:25 2007
@@ -564,6 +564,10 @@
        /*} */
 
        while ((v = LWZReadByte(fd, &sd, FALSE, c, ZeroDataBlockP)) >= 0 ) {
+               if (v >= gdMaxColors) {
+                       v = 0;
+               }
+
                /* This how we recognize which colors are actually used. */
                if (im->open[v]) {
                        im->open[v] = 0;
http://cvs.php.net/viewvc.cgi/gd/libgd/NEWS?r1=1.4.2.17&r2=1.4.2.18&diff_format=u
Index: gd/libgd/NEWS
diff -u gd/libgd/NEWS:1.4.2.17 gd/libgd/NEWS:1.4.2.18
--- gd/libgd/NEWS:1.4.2.17	Thu May 17 14:38:24 2007
+++ gd/libgd/NEWS	Fri Jun  8 05:21:25 2007
@@ -10,17 +10,20 @@
     functions) (Roman Nemecek, Nuno Lopes, Pierre)
 60, GIF Local palette is read twice
 66, GIF, Use local frame dimension when possible instead of the 
-    logical screen size
+    logical screen size (Pierre)
 68, OpenVMS build support, see VMS/README.VMS for the details 
     (Alexey Chupahin)
 70, GIF, do not try to use the global colmap if it does not exist
     (Nuno Lopes, Pierre)
-72, gdImageAALine draws axis lines with two pixels width
+72, gdImageAALine draws axis lines with two pixels width (Pierre)
 73, TTF usage doesn't work properly on Netware (Guenter Knauf, Scott MacVicar)
-74, gdImageArc CPU usage with large angles
+74, gdImageArc CPU usage with large angles (Pierre)
 78, gdImageFilledRectangle regression fixed when used with reversed edges
+    (Pierre)
 86, Possible infinite loop in libgd/gd_png.c, flaw found by Xavier Roche
     (Pierre)
+87, Fixed segfault when an invalid color index is present in the image data
+    Reported by Elliot <wccode at gmail dot com> (Pierre)
 
 GD 2.0.34 (2007-02-07)
  3, Initialize variables in tweenColorTest, fix cache