mirror of
https://git.postgresql.org/git/postgresql.git
synced 2024-12-15 08:20:16 +08:00
Backpatch fix for buffer overrun in parsing refcursor parameters to
REL7_2_STABLE.
This commit is contained in:
parent
13fab5b3ad
commit
9eeeb9809e
@ -4,7 +4,7 @@
|
||||
* procedural language
|
||||
*
|
||||
* IDENTIFICATION
|
||||
* $Header: /cvsroot/pgsql/src/pl/plpgsql/src/gram.y,v 1.29.2.1 2002/05/21 18:50:18 tgl Exp $
|
||||
* $Header: /cvsroot/pgsql/src/pl/plpgsql/src/gram.y,v 1.29.2.2 2005/01/27 01:52:34 neilc Exp $
|
||||
*
|
||||
* This software is copyrighted by Jan Wieck - Hamburg.
|
||||
*
|
||||
@ -476,6 +476,10 @@ decl_cursor_arglist : decl_cursor_arg
|
||||
{
|
||||
int i = $1->nfields++;
|
||||
|
||||
/* Guard against overflowing the array on malicious input */
|
||||
if (i >= 1024)
|
||||
yyerror("too many parameters specified for refcursor");
|
||||
|
||||
$1->fieldnames[i] = $3->refname;
|
||||
$1->varnos[i] = $3->varno;
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user