pgsql: Fix array overrun in ecpg's version of ParseDateTime().

Поиск
Список
Период
Сортировка
От Tom Lane
Тема pgsql: Fix array overrun in ecpg's version of ParseDateTime().
Дата
Msg-id E1XbJVz-00011Z-9J@gemulon.postgresql.org
обсуждение исходный текст
Список pgsql-committers
Fix array overrun in ecpg's version of ParseDateTime().

The code wrote a value into the caller's field[] array before checking
to see if there was room, which of course is backwards.  Per report from
Michael Paquier.

I fixed the equivalent bug in the backend's version of this code way back
in 630684d3a130bb93, but failed to think about ecpg's copy.  Fortunately
this doesn't look like it would be exploitable for anything worse than a
core dump: an external attacker would have no control over the single word
that gets written.

Branch
------
REL9_2_STABLE

Details
-------
http://git.postgresql.org/pg/commitdiff/b513205bc3b13d5945743f41c9fd19b9b5a94ae8

Modified Files
--------------
src/interfaces/ecpg/pgtypeslib/dt_common.c |    3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)


В списке pgsql-committers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: pgsql: Fix array overrun in ecpg's version of ParseDateTime().
Следующее
От: Robert Haas
Дата:
Сообщение: pgsql: Fix typo in elog message.