From b63d41e1e5cec186c06368a1fd9fd5d56be1994d Mon Sep 17 00:00:00 2001
From: Anatol Belski <ab@php.net>
Date: Wed, 6 Jul 2016 10:40:52 +0200
Subject: [PATCH] add tests for bug #72512

---
 ext/gd/tests/bug72512_0.phpt | 18 ++++++++++++++++++
 ext/gd/tests/bug72512_1.phpt | 18 ++++++++++++++++++
 2 files changed, 36 insertions(+)
 create mode 100644 ext/gd/tests/bug72512_0.phpt
 create mode 100644 ext/gd/tests/bug72512_1.phpt

diff --git a/ext/gd/tests/bug72512_0.phpt b/ext/gd/tests/bug72512_0.phpt
new file mode 100644
index 0000000000000..5f98662d45698
--- /dev/null
+++ b/ext/gd/tests/bug72512_0.phpt
@@ -0,0 +1,18 @@
+--TEST--
+Bug #72512 gdImageTrueColorToPaletteBody allows arbitrary write/read access, var 0
+--SKIPIF--
+<?php
+	if (!extension_loaded('gd')) die("skip gd extension not available\n");
+?>
+--FILE--
+<?php
+
+$img = imagecreatetruecolor(13, 1007);
+
+imagecolortransparent($img, -10066304);
+imagetruecolortopalette($img, TRUE, 3);
+imagescale($img, 1, 65535);
+?>
+==DONE==
+--EXPECT--
+==DONE==
diff --git a/ext/gd/tests/bug72512_1.phpt b/ext/gd/tests/bug72512_1.phpt
new file mode 100644
index 0000000000000..bba01a711863b
--- /dev/null
+++ b/ext/gd/tests/bug72512_1.phpt
@@ -0,0 +1,18 @@
+--TEST--
+Bug #72512 gdImageTrueColorToPaletteBody allows arbitrary write/read access, var 1
+--SKIPIF--
+<?php
+	if (!extension_loaded('gd')) die("skip gd extension not available\n");
+?>
+--FILE--
+<?php
+
+$img = imagecreatetruecolor(100, 100);
+imagecolortransparent($img, -1000000);
+imagetruecolortopalette($img, TRUE, 3);
+imagecolortransparent($img, 9);
+
+?>
+==DONE==
+--EXPECT--
+==DONE==