]> granicus.if.org Git - postgresql/commit
to_char(): prevent accesses beyond the allocated buffer
authorBruce Momjian <bruce@momjian.us>
Mon, 2 Feb 2015 15:00:44 +0000 (10:00 -0500)
committerBruce Momjian <bruce@momjian.us>
Mon, 2 Feb 2015 15:00:44 +0000 (10:00 -0500)
commit0150ab567bcf5e5913e2b62a1678f84cc272441f
treebdd4ee0ee72e00a46ad571cec52f63ccf00a3f32
parentf9ee8ea10a432bd5692ef9ff25055717fbf290ce
to_char():  prevent accesses beyond the allocated buffer

Previously very long field masks for floats could access memory
beyond the existing buffer allocated to hold the result.

Reported by Andres Freund and Peter Geoghegan. Backpatch to all
supported versions.

Security: CVE-2015-0241
src/backend/utils/adt/formatting.c