gd: arbitrary code execution

A heap-based buffer overflow caused by an integer signedness error has been found in the libgd code handling compressed gd2 chunks...