Skip to content

apply patch provided in #4858 - #4861

Open
hobu wants to merge 4 commits into
OSGeo:masterfrom
hobu:4858-network-read-guard
Open

hobu wants to merge 4 commits into
OSGeo:masterfrom
hobu:4858-network-read-guard

Conversation

@hobu

@hobu hobu commented Sep 19, 2026

Copy link
Copy Markdown
Contributor

Taking the patch as provided to push it through our CI machinery, but it needs a thorough review too. It's a little verbose, but it makes sense to guard the subtraction so it doesn't go OOR.

  • AI (Copilot or something similar) supported my development of this PR. See our policy about AI tool use. Use of AI tools must be indicated.
  • Closes #xxxx
  • Tests added
  • Added clear title that can be used to generate release notes
  • Fully documented, including updating docs/source/*.rst for new API

Treat truncated nonzero range responses as network errors when the advertised remote file size indicates more data should be available. This prevents short HTTP bodies from being cached or copied as valid chunk data.
Add a direct network file test for truncated range responses basic failure path so unexpected successful creation does not leak the PJ/context during test failure.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Heap-buffer-overflow in NetworkFile::read multi-chunk range handling (src/networkfilemanager.cpp)

1 participant