Opened 16 years ago

Closed 14 years ago

#337 closed defect (worksforme)

Bad GETMAPIMAGE parameter causes IIS worker process pool to die

Reported by: jbirch Owned by: stevedang
Priority: medium Milestone:
Component: Map Agent Version: 2.0.0
Severity: major Keywords:
Cc: External ID:

Description (last modified by jbirch)

I was messing around swapping around parameters to see if I could get 8bit PNG (yes I know it's not supported in GetMapImage) and found that entering PNG8 into a GetMapImage call caused my IIS worker process to die, with an error in the System Application log, but none in the MapGuide logs. Here's a sample of the request I made:

http://localhost/mapguide/mapagent/mapagent.fcgi?session=3b5ee024-0000-1000-8000-000c293f205f_en_0A0A6EC10AFC0AFB0AFA&mapname=Sheboygan&operation=GETMAPIMAGE&format=PNG8&version=1.0.0&ts=1195850858076&locale=en&setdisplaydpi=96&setdisplayheight=1128&setdisplaywidth=1882.5&setviewcenterx=-87.71854751863403&setviewcentery=43.75168236754095&setviewscale=7759.005619599771

This kind of call should not be allowed to fail in a way that causes what is essentially a DOS vector.

Change History (4)

comment:1 by jbirch, 16 years ago

Description: modified (diff)

comment:2 by tomfukushima, 16 years ago

Owner: set to stevedang

comment:3 by jbirch, 14 years ago

Please re-test against 2.1 and let us know if this is still an issue. Will close this ticket if no response by next ticket cleanup cycle.

comment:4 by jbirch, 14 years ago

Resolution: worksforme
Status: newclosed
Note: See TracTickets for help on using tickets.