Opened 9 years ago

Last modified 8 years ago

#6120 closed defect

OGRSXFLayer::TranslatePolygon validating the number of records — at Version 1

Reported by: Kurt Schwehr Owned by: warmerdam
Priority: normal Milestone:
Component: default Version: svn-trunk
Severity: normal Keywords:
Cc: bishop

Description (last modified by Kurt Schwehr)

CID 139115 (#1 of 1): Untrusted loop bound (TAINTED_SCALAR)
9. tainted_data: Using tainted variable nCoords as a loop boundary.

I think that the solution is make sure that the number of records in the buffer * the size of a record is the same as the buffer size. I've added a warning and TODO's into the method. I added the 6 to make the values match, but I'm not familar with the SXF format. Would be great to get some help with what should be the correct value in the check and how to properly manage an error.

r30471

Change History (1)

comment:1 by Kurt Schwehr, 9 years ago

Description: modified (diff)
Note: See TracTickets for help on using tickets.