[mapserver-commits] [MapServer/MapServer] 0f2c4d: [Backport branch-8-6] msDBFOpenVirtualFile(): vali...

[github-actions[bot]]

  Branch: refs/heads/branch-8-6
  Home:   https://github.com/MapServer/MapServer
  Commit: 0f2c4d8097cc90589473df0e78def9dd4875b7f9
      https://github.com/MapServer/MapServer/commit/0f2c4d8097cc90589473df0e78def9dd4875b7f9
  Author: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
  Date:   2026-08-29 (Sat, 29 Aug 2026)

  Changed paths:
    M CMakeLists.txt
    A msautotest/misc/data/dbf-invalid.dbf
    A msautotest/misc/data/dbf-invalid.shp
    A msautotest/misc/data/dbf-invalid.shx
    A msautotest/misc/dbf-invalid.map
    A msautotest/misc/expected/dbf-invalid-wfs-get-feature.xml
    M src/mapxbase.c
    M tests/unit/test.cpp

  Log Message:
  -----------
  [Backport branch-8-6] msDBFOpenVirtualFile(): validate field extents against record length (#7629)

* msDBFOpenVirtualFile(): validate field extents against record length

A .dbf header whose field offsets and sizes exceed the record length made msDBFReadAttribute() strncpy past the record buffer on the first attribute read. Reject such a header at open, as shapelib does.

* Add msautotest case for invalid .dbf field extents

data/dbf-invalid.dbf declares a record length of 10 bytes but a single
character field of width 250. A WFS GetFeature against it must fail at
layer open instead of returning attribute bytes read past the record
buffer. Modeled on flatgeobuf-invalid.map.

---------

Co-authored-by: Naveed <naveed at bugqore.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications