Make sure requested class with mode=legendicon is not negative. (#6357)

* Make sure the requested class index is not negative.
MapServer · Jul 6, 2021 · 0901b57 · 0901b57
1 parent 024af02
commit 0901b57
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mapservutil.c b/mapservutil.c
@@ -1651,7 +1651,7 @@ int msCGIDispatchLegendIconRequest(mapservObj *mapserv)
 
   if(numtokens == 2) { /* check the class index */
     classindex = atoi(tokens[1]);
-    if(classindex >= GET_LAYER(mapserv->map, layerindex)->numclasses) {
+    if(classindex < 0 || classindex >= GET_LAYER(mapserv->map, layerindex)->numclasses) {
       msSetError(MS_WEBERR, "Icon class=%d not found in layer=%s.", "mapserv()", classindex, GET_LAYER(mapserv->map, layerindex)->name);
       status = MS_FAILURE;
       goto li_cleanup;