diff options
| author | 8chan <admin@8chan.co> | 2014-10-11 15:41:16 -0700 |
|---|---|---|
| committer | czaks <marcin@6irc.net> | 2014-10-12 10:23:03 +0200 |
| commit | 6052ed8d3d6b39e870fdb403584f05efde7d91c8 (patch) | |
| tree | 40af661e24abddf1aa020fbc292848521b51fd60 /js | |
| parent | b2cbb70da371dad7f9d399067b7e6df17d7a0b68 (diff) | |
SECURITY: imagemagick/graphicsmagick was ignoring all errors
So, in a much older patch I had a problem where an incorrect RGB
profile would make image uploads fail. I fixed this by using strpos
against the error message...but didn't check the return value
correctly.
That means that any error from gm/im was ignored. This caused people
to upload too large images and flood /b/ with 1 x 10000 pixel images
My fault, patched now. Sorry about that.
Conflicts:
inc/image.php
Diffstat (limited to 'js')
0 files changed, 0 insertions, 0 deletions