Tom Lane 2fed676c93 Avoid possibly-unsafe use of Windows' FormatMessage() function. ...

Whenever this function is used with the FORMAT_MESSAGE_FROM_SYSTEM flag,
it's good practice to include FORMAT_MESSAGE_IGNORE_INSERTS as well.
Otherwise, if the message contains any %n insertion markers, the function
will try to fetch argument strings to substitute --- which we are not
passing, possibly leading to a crash.  This is exactly analogous to the
rule about not giving printf() a format string you're not in control of.

Noted and patched by Christian Ullrich.
Back-patch to all supported branches.

2016-03-29 11:54:57 -04:00

..

crashdump.c

Update copyright for 2014

2014-01-07 16:05:30 -05:00

Makefile

Only build in crashdump support on Windows if there's a working dbghelp.h.

2010-12-26 10:34:47 -05:00

mingwcompat.c

Update copyright for 2014

2014-01-07 16:05:30 -05:00

security.c

Update copyright for 2014

2014-01-07 16:05:30 -05:00

signal.c

Update copyright for 2014

2014-01-07 16:05:30 -05:00

socket.c

Avoid possibly-unsafe use of Windows' FormatMessage() function.

2016-03-29 11:54:57 -04:00

timer.c

Update copyright for 2014

2014-01-07 16:05:30 -05:00