mirror of
https://git.postgresql.org/git/postgresql.git
synced 2025-02-23 19:39:53 +08:00
Several functions, mostly type input functions, calculated an allocation size such that the calculation wrapped to a small positive value when arguments implied a sufficiently-large requirement. Writes past the end of the inadvertent small allocation followed shortly thereafter. Coverity identified the path_in() vulnerability; code inspection led to the rest. In passing, add check_stack_depth() to prevent stack overflow in related functions. Back-patch to 8.4 (all supported versions). The non-comment hstore changes touch code that did not exist in 8.4, so that part stops at 9.0. Noah Misch and Heikki Linnakangas, reviewed by Tom Lane. Security: CVE-2014-0064 |
||
---|---|---|
.. | ||
data | ||
expected | ||
sql | ||
.gitignore | ||
crc32.c | ||
crc32.h | ||
hstore_compat.c | ||
hstore_gin.c | ||
hstore_gist.c | ||
hstore_io.c | ||
hstore_op.c | ||
hstore--1.0--1.1.sql | ||
hstore--1.0.sql | ||
hstore--1.1.sql | ||
hstore--unpackaged--1.0.sql | ||
hstore.control | ||
hstore.h | ||
Makefile |