After looking into the code we found out that the variable used to set the size of the item array ("nt") isn't properly increased when the layer contains a "utfitem" parameter in the function "msTokenizeExpression" of "maplayer.c". This problem can cause a buffer overflow if all the used attribute in a layer are different.
Setting the "utfitem" parameter to an attribute that isn't present in any other parameter of the layer cause a segfault.
The text was updated successfully, but these errors were encountered: