Noah Misch ce6f261cd2 Fix buffer overrun after incomplete read in pullf_read_max(). ...

Most callers pass a stack buffer.  The ensuing stack smash can crash the
server, and we have not ruled out the viability of attacks that lead to
privilege escalation.  Back-patch to 9.0 (all supported versions).

Marko Tiikkaja

Security: CVE-2015-0243

2015-02-02 10:00:52 -05:00

..

3des.out

Fix some more regression tests (missed these because they're only

2009-08-04 20:10:00 +00:00

blowfish.out

Ooops, missed that a couple of contrib modules have calls to byteacmp.

2009-08-04 18:49:50 +00:00

cast5.out

Fix some more regression tests (missed these because they're only

2009-08-04 20:10:00 +00:00

crypt-blowfish.out

Improve psql's tabular display of wrapped-around data by inserting markers

2009-11-22 05:20:41 +00:00

crypt-des.out

SET autocommit no longer needed in /contrib because pg_regress.sh does

2002-10-21 01:42:14 +00:00

crypt-md5.out

SET autocommit no longer needed in /contrib because pg_regress.sh does

2002-10-21 01:42:14 +00:00

crypt-xdes.out

SET autocommit no longer needed in /contrib because pg_regress.sh does

2002-10-21 01:42:14 +00:00

des.out

Fix some more regression tests (missed these because they're only

2009-08-04 20:10:00 +00:00

hmac-md5.out

SET autocommit no longer needed in /contrib because pg_regress.sh does

2002-10-21 01:42:14 +00:00

hmac-sha1.out

SET autocommit no longer needed in /contrib because pg_regress.sh does

2002-10-21 01:42:14 +00:00

init.out

Ooops, missed that a couple of contrib modules have calls to byteacmp.

2009-08-04 18:49:50 +00:00

md5.out

SET autocommit no longer needed in /contrib because pg_regress.sh does

2002-10-21 01:42:14 +00:00

pgp-armor.out

Improve psql's tabular display of wrapped-around data by inserting markers

2009-11-22 05:20:41 +00:00

pgp-compression.out

Add missing pgcrypto files from previous commit.

2005-07-10 13:46:29 +00:00

pgp-decrypt.out

Loop when necessary in contrib/pgcrypto's pktreader_pull().

2014-11-11 17:22:58 -05:00

pgp-encrypt-DISABLED.out

Add missing pgcrypto files from previous commit.

2005-07-10 13:46:29 +00:00

pgp-encrypt.out

Ooops, missed that a couple of contrib modules have calls to byteacmp.

2009-08-04 18:49:50 +00:00

pgp-info.out

Fix buffer overrun after incomplete read in pullf_read_max().

2015-02-02 10:00:52 -05:00

pgp-pubkey-decrypt.out

Fix buffer overrun after incomplete read in pullf_read_max().

2015-02-02 10:00:52 -05:00

pgp-pubkey-DISABLED.out

Add missing pgcrypto files from previous commit.

2005-07-10 13:46:29 +00:00

pgp-pubkey-encrypt.out

Ooops, missed that a couple of contrib modules have calls to byteacmp.

2009-08-04 18:49:50 +00:00

pgp-zlib-DISABLED.out

Add missing pgcrypto files from previous commit.

2005-07-10 13:46:29 +00:00

rijndael.out

Ooops, missed that a couple of contrib modules have calls to byteacmp.

2009-08-04 18:49:50 +00:00

sha1.out

SET autocommit no longer needed in /contrib because pg_regress.sh does

2002-10-21 01:42:14 +00:00

sha2.out

"Annual" pgcrypto update from Marko Kreen:

2006-07-13 04:15:25 +00:00