Fix buffer underflow in gd_gif_in.c

nikic · nikic · commit 2a9fc310211e · 2019-06-19T15:41:45.000+02:00
This has been fixed upstream in libgd/libgd@939d49a.
diff --git a/ext/gd/libgd/gd_gif_in.c b/ext/gd/libgd/gd_gif_in.c
@@ -381,7 +381,7 @@ GetCode_(gdIOCtx *fd, CODE_STATIC_DATA *scd, int code_size, int flag, int *ZeroD
 	if (flag) {
 		scd->curbit = 0;
 		scd->lastbit = 0;
-		scd->last_byte = 0;
+		scd->last_byte = 2;
 		scd->done = FALSE;
 		return 0;
 	}

Original file line number	Diff line number	Diff line change
`@@ -381,7 +381,7 @@ GetCode_(gdIOCtx fd, CODE_STATIC_DATA scd, int code_size, int flag, int *ZeroD`
`381`	`381`	`if (flag) {`
`382`	`382`	`scd->curbit = 0;`
`383`	`383`	`scd->lastbit = 0;`
`384`		`- scd->last_byte = 0;`
	`384`	`+ scd->last_byte = 2;`
`385`	`385`	`scd->done = FALSE;`
`386`	`386`	`return 0;`
`387`	`387`	`}`