[mapserver-commits] [MapServer/MapServer] 972b76: bound property value reads to buffer size in flatg...

[Naveed]

  Branch: refs/heads/backport-7545-to-branch-8-6
  Home:   https://github.com/MapServer/MapServer
  Commit: 972b769b799ae81216511a785e94192e66227726
      https://github.com/MapServer/MapServer/commit/972b769b799ae81216511a785e94192e66227726
  Author: Naveed <naveed at bugqore.com>
  Date:   2026-07-07 (Tue, 07 Jul 2026)

  Changed paths:
    M src/flatgeobuf/flatgeobuf_c.cpp

  Log Message:
  -----------
  bound property value reads to buffer size in flatgeobuf decode


  Commit: c84e1160412377dd7b06ec864f8e2eacf74d1e35
      https://github.com/MapServer/MapServer/commit/c84e1160412377dd7b06ec864f8e2eacf74d1e35
  Author: Naveed <naveed at bugqore.com>
  Date:   2026-07-07 (Tue, 07 Jul 2026)

  Changed paths:
    A msautotest/misc/data/flatgeobuf-invalid.fgb
    A msautotest/misc/expected/flatgeobuf-invalid-wfs-get-feature.xml
    A msautotest/misc/flatgeobuf-invalid.map
    M src/flatgeobuf/flatgeobuf_c.cpp

  Log Message:
  -----------
  reject flatgeobuf feature on property decode error and add bounds test

flatgeobuf_decode_feature ignored the return of
flatgeobuf_decode_properties, so a feature rejected for an out-of-bounds
property length was still handed back with unset values, which crashed
the WFS query path on the NULL value. Propagate the failure so the
feature is skipped.

Add a msautotest case with a one-feature data/flatgeobuf-invalid.fgb
whose string property claims more bytes than the property blob holds; a
WFS GetFeature request now returns a clean service exception instead of
reading past the buffer.


Compare: https://github.com/MapServer/MapServer/compare/972b769b799a%5E...c84e11604123

To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications