Merge branch 'pull-request/296'

libgd · Sep 16, 2016 · 40bec0f · 40bec0f
2 parents 0423df1 + 2806adf
commit 40bec0f
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/src/gd_webp.c b/src/gd_webp.c
@@ -199,6 +199,14 @@ BGD_DECLARE(void) gdImageWebpCtx (gdImagePtr im, gdIOCtx * outfile, int quality)
 		quality = 80;
 	}
 
+	if (overflow2(gdImageSX(im), 4)) {
+		return;
+	}
+
+	if (overflow2(gdImageSX(im) * 4, gdImageSY(im))) {
+		return;
+	}
+
 	argb = (uint8_t *)gdMalloc(gdImageSX(im) * 4 * gdImageSY(im));
 	if (!argb) {
 		return;