diff --git a/ext/gd/gd.c b/ext/gd/gd.c index d43ecab0d9c74..0bbf077a52500 100644 --- a/ext/gd/gd.c +++ b/ext/gd/gd.c @@ -167,9 +167,7 @@ PHP_GD_API gdImagePtr php_gd_libgdimageptr_from_zval_p(zval* zp) zend_object *php_gd_image_object_create(zend_class_entry *class_type) { - size_t block_len = sizeof(php_gd_image_object) + zend_object_properties_size(class_type); - php_gd_image_object *intern = emalloc(block_len); - memset(intern, 0, block_len); + php_gd_image_object *intern = zend_object_alloc(sizeof(php_gd_image_object), class_type); zend_object_std_init(&intern->std, class_type); object_properties_init(&intern->std, class_type); diff --git a/ext/gd/libgd/gd.c b/ext/gd/libgd/gd.c index 757af88414d5a..71a0e9ea63f22 100644 --- a/ext/gd/libgd/gd.c +++ b/ext/gd/libgd/gd.c @@ -3190,8 +3190,8 @@ int gdImagePaletteToTrueColor(gdImagePtr src) // Note: do not revert back to gdMalloc() below ; reason here, // due to a bug with a certain memory_limit INI value treshold, // imagepalettetotruecolor crashes with even unrelated ZendMM allocations. - // See GH-17772 for an use case. - src->tpixels = (int **) gdCalloc(sizeof(int *), sy); + // See GH-17772 for a use case. + src->tpixels = (int **) gdCalloc(sy, sizeof(int *)); if (src->tpixels == NULL) { return 0; }