[mapserver-commits] [MapServer/MapServer] f4cbf2: bound property value reads to buffer size in flatg...

[Even Rouault]

  Branch: refs/heads/main
  Home:   https://github.com/MapServer/MapServer
  Commit: f4cbf2201275bc9e3235a4b03b0b65253d1a8b0d
      https://github.com/MapServer/MapServer/commit/f4cbf2201275bc9e3235a4b03b0b65253d1a8b0d
  Author: Naveed <naveed at bugqore.com>
  Date:   2026-07-01 (Wed, 01 Jul 2026)

  Changed paths:
    M src/flatgeobuf/flatgeobuf_c.cpp

  Log Message:
  -----------
  bound property value reads to buffer size in flatgeobuf decode


  Commit: 9c7b67f24b283c0241fb21aa928435f2e22e05f6
      https://github.com/MapServer/MapServer/commit/9c7b67f24b283c0241fb21aa928435f2e22e05f6
  Author: Naveed <naveed at bugqore.com>
  Date:   2026-07-03 (Fri, 03 Jul 2026)

  Changed paths:
    A msautotest/misc/data/flatgeobuf-invalid.fgb
    A msautotest/misc/expected/flatgeobuf-invalid-wfs-get-feature.xml
    A msautotest/misc/flatgeobuf-invalid.map
    M src/flatgeobuf/flatgeobuf_c.cpp

  Log Message:
  -----------
  reject flatgeobuf feature on property decode error and add bounds test

flatgeobuf_decode_feature ignored the return of
flatgeobuf_decode_properties, so a feature rejected for an out-of-bounds
property length was still handed back with unset values, which crashed
the WFS query path on the NULL value. Propagate the failure so the
feature is skipped.

Add a msautotest case with a one-feature data/flatgeobuf-invalid.fgb
whose string property claims more bytes than the property blob holds; a
WFS GetFeature request now returns a clean service exception instead of
reading past the buffer.


  Commit: dcc86a31727edb52b3f32fffaed2dd12e68b2ca7
      https://github.com/MapServer/MapServer/commit/dcc86a31727edb52b3f32fffaed2dd12e68b2ca7
  Author: Even Rouault <even.rouault at spatialys.com>
  Date:   2026-07-07 (Tue, 07 Jul 2026)

  Changed paths:
    A msautotest/misc/data/flatgeobuf-invalid.fgb
    A msautotest/misc/expected/flatgeobuf-invalid-wfs-get-feature.xml
    A msautotest/misc/flatgeobuf-invalid.map
    M src/flatgeobuf/flatgeobuf_c.cpp

  Log Message:
  -----------
  Merge pull request #7545 from nvxbug/fgb-property-bounds

validate property value bounds in flatgeobuf_decode_properties


Compare: https://github.com/MapServer/MapServer/compare/b580ee5a39ac...dcc86a31727e

To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications