postgresql/contrib/hstore
Noah Misch 12bbce15d9 Predict integer overflow to avoid buffer overruns.
Several functions, mostly type input functions, calculated an allocation
size such that the calculation wrapped to a small positive value when
arguments implied a sufficiently-large requirement.  Writes past the end
of the inadvertent small allocation followed shortly thereafter.
Coverity identified the path_in() vulnerability; code inspection led to
the rest.  In passing, add check_stack_depth() to prevent stack overflow
in related functions.

Back-patch to 8.4 (all supported versions).  The non-comment hstore
changes touch code that did not exist in 8.4, so that part stops at 9.0.

Noah Misch and Heikki Linnakangas, reviewed by Tom Lane.

Security: CVE-2014-0064
2014-02-17 09:33:33 -05:00
..
data Add GIN support for pg_trgm. From Guillaume Smet <guillaume.smet@gmail.com> 2007-03-14 14:21:53 +00:00
expected Preserve column names in the execution-time tupledesc for a RowExpr. 2012-02-14 17:34:56 -05:00
sql Fix hstore regression tests. 2011-11-08 08:09:10 -05:00
.gitignore Support "make check" in contrib 2011-04-25 22:27:11 +03:00
crc32.c Remove cvs keywords from all files. 2010-09-20 22:08:53 +02:00
crc32.h Remove cvs keywords from all files. 2010-09-20 22:08:53 +02:00
hstore_compat.c Remove unnecessary #include references, per pgrminclude script. 2011-09-01 10:04:27 -04:00
hstore_gin.c pgindent run before PG 9.1 beta 1. 2011-04-10 11:42:00 -04:00
hstore_gist.c Remove many -Wcast-qual warnings 2011-09-11 21:54:32 +03:00
hstore_io.c Predict integer overflow to avoid buffer overruns. 2014-02-17 09:33:33 -05:00
hstore_op.c Predict integer overflow to avoid buffer overruns. 2014-02-17 09:33:33 -05:00
hstore--1.0--1.1.sql Fix hstore regression tests. 2011-11-08 08:09:10 -05:00
hstore--1.0.sql Throw a useful error message if an extension script file is fed to psql. 2011-10-12 15:45:03 -04:00
hstore--1.1.sql Remove hstore's text => text operator. 2011-11-07 21:47:45 -05:00
hstore--unpackaged--1.0.sql Throw a useful error message if an extension script file is fed to psql. 2011-10-12 15:45:03 -04:00
hstore.control Remove hstore's text => text operator. 2011-11-07 21:47:45 -05:00
hstore.h Predict integer overflow to avoid buffer overruns. 2014-02-17 09:33:33 -05:00
Makefile Don't install hstore--1.0.sql any more. 2012-02-22 20:37:13 -05:00