Noah Misch 1dc7551586 Fix buffer overrun after incomplete read in pullf_read_max(). ...

Most callers pass a stack buffer.  The ensuing stack smash can crash the
server, and we have not ruled out the viability of attacks that lead to
privilege escalation.  Back-patch to 9.0 (all supported versions).

Marko Tiikkaja

Security: CVE-2015-0243

2015-02-02 10:00:45 -05:00

32 KiB

Raw Blame History

View Raw