[mapserver-users] MapServer 5.4.0 Buffer Overflow Error

[Daniel Morissette]

The error you get is similar to the one fixed in GDAL 1.6.1 
(http://trac.osgeo.org/gdal/ticket/2896) but it is not the same one. It 
is actually another instance of a similar problem in MapServer's 
msDrawRasterLayerLow() source code. (Thanks to EvenR for pointing that 
to us off-list).

Until a new release of MapServer with this fix is available, you could 
possibly recompile MapServer with -U_FORTIFY_SOURCE or 
-D_FORTIFY_SOURCE=0 in the CFLAGS.

Daniel


Juan Felipe Alvarez Saldarriaga wrote:
> Hey, I set the ubuntugis repo, but still, I got a overflow error, this
> is what I got on Ubuntu installed:
> 
> ii  libgdal1-1.6.0 1.6.1-1~jaunty Geospatial Data Abstraction Library
> ii  mapserver-bin  5.4.0-2~jaunty MapServer utilities
> ii  cgi-mapserver  5.4.0-2~jaunty CGI executable for MapServer
> ii  proj           4.6.1-5~jaunty Cartographic projection filter and library
> 
> I mean, I install all things from the PPA repo, but I still got the
> overflow :S, thx for any answer, this is the debug from shp2img
> 
> shp2img -all_debug 3 -m
> /home/jfalvarez/projects/cms/branches/V1/docroot/map-files/9182340517c2d323061dc1cffea6e431.map
> 
> HTTP: Starting to prepare HTTP requests.
> HTTP request: id=0, http://wms.jpl.nasa.gov/browse.cgi?wms_server=wms.cgi&LAYERS
> =BMNG&REQUEST=GetMap&SERVICE=WMS&FORMAT=image/jpeg&STYLES=&HEIGHT=600&VERSION=1.
> 1.1&SRS=EPSG:4326&WIDTH=800&BBOX=-94.0767946577629,-54.0575959933222,-1.92320534
> 223706,15.0575959933222&TRANSPARENT=TRUE&EXCEPTIONS=application/vnd.ogc.se_inima
> ge
> HTTP: Before download loop
> msHTTPWriteFct(id=0, 852 bytes)
> HTTP: After download loop
> msHTTPExecuteRequests() timing summary per layer (connect_time + time_to_first_p
> acket + download_time = total_time in seconds)
> Layer 0: 0.169 + 0.248 + 0.271 = 0.688s
> msDrawRasterLayerLow(BMNG): entering.
> *** buffer overflow detected ***: shp2img terminated
> ======= Backtrace: =========
> /lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb68bcda8]
> /lib/tls/i686/cmov/libc.so.6[0xb68baeb0]
> /lib/tls/i686/cmov/libc.so.6(__strcpy_chk+0x44)[0xb68ba184]
> shp2img(msDrawRasterLayerLow+0xd4d)[0x812905d]
> shp2img(msDrawRasterLayer+0x83)[0x80939b3]
> shp2img(msDrawLayer+0x483)[0x8094a33]
> shp2img(msDrawWMSLayerLow+0x598)[0x813cb08]
> shp2img(msDrawMap+0x807)[0x8096387]
> shp2img(main+0x912)[0x8067722]
> /lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb67d5775]
> shp2img[0x8066d71]

-- 
Daniel Morissette
http://www.mapgears.com/