Opened 9 years ago

Closed 6 years ago

#4720 closed defect (fixed)

[Shapelib - PATCH] Add sanity checks in SHPSearchDiskTreeNode()

Reported by: Even Rouault Owned by: warmerdam
Priority: normal Milestone:
Component: OGR_SF Version: unspecified
Severity: normal Keywords: shapelib
Cc:

Description

SHPSearchDiskTreeNode() does not validate the values read from the file. This could be used to cause potential DoS or crashes.

Attachments (1)

shptree_sanity_checks.patch (5.4 KB) - added by Even Rouault 9 years ago.

Download all attachments as: .zip

Change History (4)

Changed 9 years ago by Even Rouault

Attachment: shptree_sanity_checks.patch added

comment:1 Changed 9 years ago by Even Rouault

r24612 /trunk/gdal/ogr/ogrsf_frmts/shape/shptree.c: Add sanity checks in SHPSearchDiskTreeNode() (#4720)

comment:2 Changed 6 years ago by Jukka Rahkonen

I suppose this ticket can be closed as fixed, or what?

comment:3 Changed 6 years ago by Jukka Rahkonen

Resolution: fixed
Status: newclosed
Note: See TracTickets for help on using tickets.