Opened 12 years ago

Closed 9 years ago

#4720 closed defect (fixed)

[Shapelib - PATCH] Add sanity checks in SHPSearchDiskTreeNode()

Reported by: Even Rouault Owned by: warmerdam
Priority: normal Milestone:
Component: OGR_SF Version: unspecified
Severity: normal Keywords: shapelib
Cc:

Description

SHPSearchDiskTreeNode() does not validate the values read from the file. This could be used to cause potential DoS or crashes.

Attachments (1)

shptree_sanity_checks.patch (5.4 KB ) - added by Even Rouault 12 years ago.

Download all attachments as: .zip

Change History (4)

by Even Rouault, 12 years ago

Attachment: shptree_sanity_checks.patch added

comment:1 by Even Rouault, 12 years ago

r24612 /trunk/gdal/ogr/ogrsf_frmts/shape/shptree.c: Add sanity checks in SHPSearchDiskTreeNode() (#4720)

comment:2 by Jukka Rahkonen, 9 years ago

I suppose this ticket can be closed as fixed, or what?

comment:3 by Jukka Rahkonen, 9 years ago

Resolution: fixed
Status: newclosed
Note: See TracTickets for help on using tickets.