postgres

mirror of https://github.com/postgres/postgres.git synced 2025-05-03 22:24:49 +03:00

History

Tom Lane 7ccb6dc2d3 Prevent buffer overrun while parsing an integer in a "query_int" value.

contrib/intarray's gettoken() uses a fixed-size buffer to collect an
integer's digits, and did not guard against overrunning the buffer.
This is at least a backend crash risk, and in principle might allow
arbitrary code execution.  The code didn't check for overflow of the
integer value either, which while not presenting a crash risk was still
bad.

Thanks to Apple Inc's security team for reporting this issue and supplying
the fix.

Security: CVE-2010-4015

2011-01-27 17:42:39 -05:00

bench

Remove useless whitespace at end of lines

2010-11-23 22:34:55 +02:00

data

1. Fixed error with empty array ( '{}' ),

2001-08-04 19:35:32 +00:00

expected

Remove ill-considered (not to mention undocumented) attempt to make

2007-09-14 03:25:31 +00:00

sql

Remove ill-considered (not to mention undocumented) attempt to make