From: Michael Meskes <meskes@postgresql.org>
Date: Thu, 11 Apr 2019 18:56:17 +0000 (+0200)
Subject: Fix off-by-one check that can lead to a memory overflow in ecpg.
X-Git-Tag: REL_12_BETA1~250
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=ed16ba3248d486ec8b2fdfc75e442620d675b617;p=postgresql

Fix off-by-one check that can lead to a memory overflow in ecpg.

Patch by Liu Huailing <liuhuailing@cn.fujitsu.com>
---

diff --git a/src/interfaces/ecpg/preproc/pgc.l b/src/interfaces/ecpg/preproc/pgc.l
index 60474b0b4a..3dc2453a2f 100644
--- a/src/interfaces/ecpg/preproc/pgc.l
+++ b/src/interfaces/ecpg/preproc/pgc.l
@@ -1556,7 +1556,7 @@ parse_include(void)
 
 		for (ip = include_paths; yyin == NULL && ip != NULL; ip = ip->next)
 		{
-			if (strlen(ip->path) + strlen(yytext) + 3 > MAXPGPATH)
+			if (strlen(ip->path) + strlen(yytext) + 4 > MAXPGPATH)
 			{
 				fprintf(stderr, _("Error: include path \"%s/%s\" is too long on line %d, skipping\n"), ip->path, yytext, yylineno);
 				continue;