| author | Tomas Klacko <tomas.klacko@oracle.com> |
| Tue, 19 Jun 2012 02:04:06 -0700 | |
| branch | s11-sru |
| changeset 2292 | 7fe16a6a2bde |
| parent 130 | 5e67396e42dc |
| permissions | -rw-r--r-- |
# Patch for libgd2 Version 2.0.35 CVE-2009-3546 --- gd_gd.c 2006-04-05 08:52:22.000000000 -0700 +++ gd_gd.c 2011-02-16 17:57:09.865711091 -0800 @@ -44,6 +44,10 @@ { goto fail1; } + if (im->colorsTotal > gdMaxColors) + { + goto fail1; + } } /* Int to accommodate truecolor single-color transparency */ if (!gdGetInt (&im->transparent, in))