diff options
author | Pierre Joye <pierre.php@gmail.com> | 2016-07-19 15:51:43 +0700 |
---|---|---|
committer | Stanislav Malyshev <stas@php.net> | 2016-07-19 01:56:35 -0700 |
commit | 75211491936ab23281e7d6d45a1fd78076571d0c (patch) | |
tree | dfda08fec664e191728eec638edbc8b1bf2c5daa | |
parent | 47d6ea6332d457f16ab4b33f42fdb62e66acb73f (diff) | |
download | php-git-75211491936ab23281e7d6d45a1fd78076571d0c.tar.gz |
improve fix #72558, while (u>=0) with unsigned int will always be true
-rw-r--r-- | ext/gd/libgd/gd_interpolation.c | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/ext/gd/libgd/gd_interpolation.c b/ext/gd/libgd/gd_interpolation.c index 37e14a1c0b..e00135ae71 100644 --- a/ext/gd/libgd/gd_interpolation.c +++ b/ext/gd/libgd/gd_interpolation.c @@ -906,11 +906,12 @@ static inline LineContribType * _gdContributionsAlloc(unsigned int line_length, res->ContribRow[u].Weights = (double *) gdMalloc(windows_size * sizeof(double)); } if (overflow_error == 1 || res->ContribRow[u].Weights == NULL) { + unsigned int i; u--; - while (u >= 0) { - gdFree(res->ContribRow[u].Weights); - u--; + for (i=0;i<=u;i++) { + gdFree(res->ContribRow[i].Weights); } + gdFree(res); return NULL; } } |