ID:               37360
 Updated by:       [EMAIL PROTECTED]
 Reported By:      cnteacher at discuz dot com
-Status:           Open
+Status:           Bogus
 Bug Type:         GD related
 Operating System: win32/*nix
 PHP Version:      5CVS-2006-05-08 (snap)
 New Comment:

Please do not submit the same bug more than once. An existing
bug report already describes this very problem. Even if you feel
that your issue is somewhat different, the resolution is likely
to be the same. 

Thank you for your interest in PHP.

Dup of bug #37346


Previous Comments:
------------------------------------------------------------------------

[2006-05-08 08:16:49] judas dot iscariote at gmail dot com

duplicated of http://bugs.php.net/bug.php?id=37346

already fixed in CVS

------------------------------------------------------------------------

[2006-05-08 05:59:03] cnteacher at discuz dot com

Sorry.

If you get an Forbidden error,

you must visit www.freediscuz.net first, and than type the file's url
in brower.

------------------------------------------------------------------------

[2006-05-08 05:44:44] cnteacher at discuz dot com

The test gif url

http://www.freediscuz.net/tools/specialgif.zip

------------------------------------------------------------------------

[2006-05-08 05:40:23] cnteacher at discuz dot com

Description:
------------
When I use the function 'imageCreateFromGIF' with some special images
(GIF), the memory will be ran out. I test it with all GD version (above
2.0.28).

Reproduce code:
---------------
$file = 'specialimg.gif';
$im = imagecreatefromgif($file); 

Expected result:
----------------
the memory ran out, and my web server is down.

Actual result:
--------------
I put the special gif file on my friend's web, you can download it from
http://www.freediscuz.net/specialgif.zip.
I think some one can use this bug to attack web server. It's so danger.


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=37360&edit=1

Reply via email to