= GDAL/OGR 3.0.2 Release Notes =

The 3.0.2 release is a bug fix release.

== Misc ==

 * Replace a few catch of bad_alloc by exception to handle the case of 32 bit trying to allocate more than 4GB of memory and thus throwing a length_error exception. Found by OSS Fuzz
 * Fix issues with thread_local and C++ objects that don't work well with DLL on Windows
 * Fix build against Poppler 0.82

== Port ==

 * /vsicrypt/: fix memleak in error code path
 * /vsitar/: accept space as end of field terminator

== GDAL core ==

 * fix non-neareset resampling over nodata blocks (#1941)

== GDAL utilities ==

 * gdalwarp: adjust nodata values, passed with -srcnodata/-dstnodata, and close to FLT_MAX to exactly it (#1724)
 * Python scripts: GetOutputDriverFor(): fixes error when multiple drivers found ( #1719)

== GDAL drivers ==

BAG driver:
 * calculate the northeast pixel corner rather than scaling the resolution, due to an incorrectly shifted northeast corner in some CARIS surveys (#1728)

CTable2Dataset driver:
 * SetGeoTransform(): fix read buffer overflow from stack

DAAS driver:
 * accept 4-band RGBA PNG response even when a single band is requested

ENVI driver:
 * preserve 'byte order' on update (#1796)

FITS driver:
 * fix memory leaks

GTiff driver:
 * fix memory leak with -co APPEND_SUBDATASET=YES
 * ensure GDAL PROJ context is used for all libgeotiff functions (requires internal libgeotiff / libgeotiff 1.6)
 * make sure that GetMetadataDomainList() doesn't return EXIF when there's no EXIF metadata (https://github.com/mapbox/rasterio/pull/1740#issuecomment-526660946)
 * GTIFGetOGISDefn: avoid querying UOM length info when it is KvUserDefined to avoid an error to be emitted
 * Internal libtiff: backport security related fixes

HDF5 and netCDF drivers:
 * fix crash when reading attributes of type string of variable length with NULL values

IGNFHeightASCIIGrid driver:
 * fix to read RASPM2018.mnt grid

JP2KAK driver:
 * fix issue with multi-threaded reads

JP2OpenJPEG driver:
 * fix error logic in multi-threaded code causing memory corruption
 * fix reading overviews, when tiled API is used, and the dimensions of the full resolution image are not a multiple of 2^numresolutions (#1860)
 * fix to return the proper number of bytes read when we read more than 2 GB at once (https://github.com/uclouvain/openjpeg/issues/1151)

JPEG driver:
 * fix further calls to RasterIO after reading full image at full resolution (#1947)

MRF driver:
 * do not hardcode GDAL internal zlib header

netCDF driver:
 * Allow "radian" value for the X/Y axis units

PDF driver:
 * PDF composer from XML: fix wrong use of SetupVectorGeoreferencing()
 * fix nullptr dereferences on corrupted files (OSS Fuzz #16438, #16558, #16759)
 * fix potential heap buffer overflow (OSS Fuzz #16546)
 * avoid potential integer division by zero (OSS Fuzz #17129)

PDS4 driver:
 * support reading a_axis_radius and c_axis_radius (#1851)

SAFE driver:
 * avoid potential use-after-free (Coverity 1404037 and 1404140)

Terragen driver:
 * avoid potential use-after-free on error code path in write_header() (Coverity 1404060)

USGSDEM driver:
 * avoid int overflow. Fixes OSS Fuzz #15715
 * fix reading FEMA generated Lidar datasets whose header is 918 bytes large

VRT driver:
 * avoid erroneous pixel request do be done with KernelFilteredSource

== OGR core ==

 * OGRExpatRealloc(): fix double-free when size to allocate is above the default 10MB threshold. OSS Fuzz #16178 / CVE-2019-17545
 * OGR SQLite: do not propagate 'IS / IS NOT value' constructs to OGR SQL
 * OGRSimpleCurve::setNumPoints(): avoid potential int overflow on 32 bit on big values of nNewPointCount. OSS Fuzz #18092
 * OGRSimpleCurve::getPoints() with XYZM: fix wrong stride used for M array
 * OGRSimpleCurve: fix reversePoints() and addSubLineString() to take into account M dimension

== OGR drivers ==

CAD driver:
 * libopencad: CADBuffer: replace m_guard by m_nSize to avoid pointer wrap around on 32 bit platforms on corrupted files. OSS Fuzz #16388

DGN driver:
 * avoid size_t overflow / illegal memory access. OSS Fuzz #16393

GeoJSON driver:
 * fix update of file on Windows (https://github.com/qgis/QGIS/issues/28580)
 * add a OGR_GEOJSON_MAX_OBJ_SIZE configuration option to be able to parse jumbo GeoJSON Features.

GPX driver:
 * fix memory leak when streaming to /vsistdout/

LIBKML driver:
 * make it accept /vsigzip/foo.kml.gz files (#1743)
 * fix potential memory leak. (Coverity 1404148)

MITAB driver:
 * Update WindowsLatin2 definition (#1571)
 * fix potential double-free (Coverity 1404224)
 * avoid potential nullptr deref (Coverity 1404174)

PDF driver:
 * fix reading polygon with holes and Bezier curves (#1932)
 * fix reading strings with escape sequences

PostgreSQL driver:
 * add support for PostgreSQL 12 (#1692)
 * be more restrictive when deducing non-nullability of columns in SQL result layers (#1734)

Selafin driver:
 * temptative fix for stack read overflow of OSS Fuzz #18342

S57 driver:
 * s57objectclasses.csv: add missing TXTDSC attribute for DRYDOC class (#1723)

XLSX driver:
 * add support for .xlsm extension

WFS3/OAPIF driver:
 * correctly handle user query string parameters in connection URL (#1710)
 * align with the final state of the OGC API - Features : Core 1.0 spec (#1878)

== Python bindings ==

 * add compatibility with SWIG 4.0 (#1702)
 * Fix swig python wheel on darwin