xref: /PHP-5.3/ext/gd/libgd/gd_security.c (revision b6e317e2)
1 /*
2    * gd_security.c
3    *
4    * Implements buffer overflow check routines.
5    *
6    * Written 2004, Phil Knirsch.
7    * Based on netpbm fixes by Alan Cox.
8    *
9  */
10 
11 #ifdef HAVE_CONFIG_H
12 #include "config.h"
13 #endif
14 
15 #include <stdio.h>
16 #include <stdlib.h>
17 #include <limits.h>
18 #include "gd.h"
19 
overflow2(int a,int b)20 int overflow2(int a, int b)
21 {
22 	if(a <= 0 || b <= 0) {
23 		php_gd_error("gd warning: one parameter to a memory allocation multiplication is negative or zero, failing operation gracefully\n");
24 		return 1;
25 	}
26 	if(a > INT_MAX / b) {
27 		php_gd_error("gd warning: product of memory allocation multiplication would exceed INT_MAX, failing operation gracefully\n");
28 		return 1;
29 	}
30 	return 0;
31 }
32