[mapserver-commits] [MapServer/MapServer] 972b76: bound property value reads to buffer size in flatg...

[Even Rouault]

  Branch: refs/heads/branch-8-6
  Home:   https://github.com/MapServer/MapServer
  Commit: 972b769b799ae81216511a785e94192e66227726
      https://github.com/MapServer/MapServer/commit/972b769b799ae81216511a785e94192e66227726
  Author: Naveed <naveed at bugqore.com>
  Date:   2026-07-07 (Tue, 07 Jul 2026)

  Changed paths:
    M src/flatgeobuf/flatgeobuf_c.cpp

  Log Message:
  -----------
  bound property value reads to buffer size in flatgeobuf decode


  Commit: c84e1160412377dd7b06ec864f8e2eacf74d1e35
      https://github.com/MapServer/MapServer/commit/c84e1160412377dd7b06ec864f8e2eacf74d1e35
  Author: Naveed <naveed at bugqore.com>
  Date:   2026-07-07 (Tue, 07 Jul 2026)

  Changed paths:
    A msautotest/misc/data/flatgeobuf-invalid.fgb
    A msautotest/misc/expected/flatgeobuf-invalid-wfs-get-feature.xml
    A msautotest/misc/flatgeobuf-invalid.map
    M src/flatgeobuf/flatgeobuf_c.cpp

  Log Message:
  -----------
  reject flatgeobuf feature on property decode error and add bounds test

flatgeobuf_decode_feature ignored the return of
flatgeobuf_decode_properties, so a feature rejected for an out-of-bounds
property length was still handed back with unset values, which crashed
the WFS query path on the NULL value. Propagate the failure so the
feature is skipped.

Add a msautotest case with a one-feature data/flatgeobuf-invalid.fgb
whose string property claims more bytes than the property blob holds; a
WFS GetFeature request now returns a clean service exception instead of
reading past the buffer.


  Commit: d56c464d9ccb100cafa7620e84dda451409795c1
      https://github.com/MapServer/MapServer/commit/d56c464d9ccb100cafa7620e84dda451409795c1
  Author: Even Rouault <even.rouault at spatialys.com>
  Date:   2026-07-08 (Wed, 08 Jul 2026)

  Changed paths:
    A msautotest/misc/data/flatgeobuf-invalid.fgb
    A msautotest/misc/expected/flatgeobuf-invalid-wfs-get-feature.xml
    A msautotest/misc/flatgeobuf-invalid.map
    M src/flatgeobuf/flatgeobuf_c.cpp

  Log Message:
  -----------
  Merge pull request #7563 from MapServer/backport-7545-to-branch-8-6

[Backport branch-8-6] validate property value bounds in flatgeobuf_decode_properties


Compare: https://github.com/MapServer/MapServer/compare/f1552cbcd6fb...d56c464d9ccb

To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications