On 6/15/07, Stanislav Malyshev <[EMAIL PROTECTED]> wrote:
> +     pts = (char *) ecalloc(im->sy * im->sx, sizeof(char));

I don't see any overflow checks around, are you sure it's safe?

Checks are done in gdImageCreate*

--Pierre

Ah, exactly. That explains why I wasn't able to crash it :-)
Nuno

--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to