[postgis-tickets] [PostGIS] #2298: ST_AsGML geography crashable with monkey inputs

PostGIS trac at osgeo.org
Sat May 4 07:07:56 PDT 2013


#2298: ST_AsGML geography crashable with monkey  inputs
---------------------+------------------------------------------------------
 Reporter:  robe     |       Owner:  pramsey      
     Type:  defect   |      Status:  new          
 Priority:  medium   |   Milestone:  PostGIS 2.1.0
Component:  postgis  |     Version:  trunk        
 Keywords:           |  
---------------------+------------------------------------------------------
 ST_AsGML is not kiddie proof (at least not on windows anyway).

 This is testing on:

 {{{
 POSTGIS="2.1.0SVN r11349" GEOS="3.4.0dev-CAPI-1.8.0 r0" PROJ="Rel. 4.8.0,
 6 March 2012" GDAL="GDAL 1.10.0, released 2013/04/24" LIBXML="2.7.8"
 LIBJSON="UNKNOWN" RASTER PostgreSQL 9.2.4, compiled by Visual C++ build
 1600, 32-bit
 }}}


 Garden monkey script can crash it with a geography point something like
 this:

 {{{

 SELECT ST_AsGML(2, geography(ST_Point(-1,20)),5,5
   , 'monkey', 'monkey' );
 }}}


 Though:


 {{{
 -- this doesn't crash --
 SELECT ST_AsGML(2, ST_Point(-1,20),5,5, 'monkey', 'monkey' );

 and outputs:
 <monkey:Point><monkey:coordinates>-1,20</monkey:coordinates></monkey:Point>
 }}}


 nor does not specifying a schema

 {{{
 SELECT ST_AsGML(2, geography(ST_Point(-1,20)),5,5 );
 }}}

-- 
Ticket URL: <http://trac.osgeo.org/postgis/ticket/2298>
PostGIS <http://trac.osgeo.org/postgis/>
The PostGIS Trac is used for bug, enhancement & task tracking, a user and developer wiki, and a view into the subversion code repository of PostGIS project.


More information about the postgis-tickets mailing list