Quick Links

pgsql: to_char(): prevent accesses beyond the allocated buffer

From:	Bruce Momjian <bruce(at)momjian(dot)us>
To:	pgsql-committers(at)postgresql(dot)org
Subject:	pgsql: to_char(): prevent accesses beyond the allocated buffer
Date:	2015-02-02 15:01:50
Message-ID:	[email protected]
Views:	Whole Thread \| Raw Message \| Download mbox \| Resend email
Thread:
Lists:	pgsql-committers

to_char(): prevent accesses beyond the allocated buffer

Previously very long field masks for floats could access memory
beyond the existing buffer allocated to hold the result.

Reported by Andres Freund and Peter Geoghegan. Backpatch to all
supported versions.

Security: CVE-2015-0241

Branch
------
REL9_1_STABLE

Modified Files
--------------
src/backend/utils/adt/formatting.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)

	From	Date	Subject
Next Message	Heikki Linnakangas	2015-02-02 15:18:15	pgsql: Be more careful to not lose sync in the FE/BE protocol.
Previous Message	Tom Lane	2015-02-02 05:19:43	pgsql: Doc: fix syntax description for psql's \setenv.