database/postgres
database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-04-29 13:56:47 +03:00
Code

Add recursion depth protection to LIKE matching.

Browse Source 
Since MatchText() recurses, it could in principle be driven to stack
overflow, although quite a long pattern would be needed.
This commit is contained in:
Tom Lane 2015-10-02 15:00:51 -04:00
parent b63fc28776
commit 2e8cfcf4ea
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/backend/utils/adt/like.c
View File

@ -21,6 +21,7 @@
#include "catalog/pg_collation.h" #include "catalog/pg_collation.h"
#include "mb/pg_wchar.h" #include "mb/pg_wchar.h"
#include "miscadmin.h"
#include "utils/builtins.h" #include "utils/builtins.h"
#include "utils/pg_locale.h" #include "utils/pg_locale.h"

3
src/backend/utils/adt/like_match.c
View File

@ -83,6 +83,9 @@ MatchText(char *t, int tlen, char *p, int plen,
if (plen == 1 && *p == '%') if (plen == 1 && *p == '%')
return LIKE_TRUE; return LIKE_TRUE;
/* Since this function recurses, it could be driven to stack overflow */
check_stack_depth();
/* /*
* In this loop, we advance by char when matching wildcards (and thus on * In this loop, we advance by char when matching wildcards (and thus on
* recursive entry to this function we are properly char-synced). On other * recursive entry to this function we are properly char-synced). On other