Return to gd_security.c CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / php / ext / gd / libgd

Annotation of embedaddon/php/ext/gd/libgd/gd_security.c, revision 1.1.1.1

1.1       misho       1: /*
                      2:    * gd_security.c
                      3:    *
                      4:    * Implements buffer overflow check routines.
                      5:    *
                      6:    * Written 2004, Phil Knirsch.
                      7:    * Based on netpbm fixes by Alan Cox.
                      8:    *
                      9:  */
                     10: 
                     11: #ifdef HAVE_CONFIG_H
                     12: #include "config.h"
                     13: #endif
                     14: 
                     15: #include <stdio.h>
                     16: #include <stdlib.h>
                     17: #include <limits.h>
                     18: #include "gd.h"
                     19: 
                     20: int overflow2(int a, int b)
                     21: {
                     22:        if(a <= 0 || b <= 0) {
                     23:                php_gd_error("gd warning: one parameter to a memory allocation multiplication is negative or zero, failing operation gracefully\n");
                     24:                return 1;
                     25:        }
                     26:        if(a > INT_MAX / b) {
                     27:                php_gd_error("gd warning: product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully\n");
                     28:                return 1;
                     29:        }
                     30:        return 0;
                     31: }