postgresql/contrib/intarray
Noah Misch 31400a6733 Predict integer overflow to avoid buffer overruns.
Several functions, mostly type input functions, calculated an allocation
size such that the calculation wrapped to a small positive value when
arguments implied a sufficiently-large requirement.  Writes past the end
of the inadvertent small allocation followed shortly thereafter.
Coverity identified the path_in() vulnerability; code inspection led to
the rest.  In passing, add check_stack_depth() to prevent stack overflow
in related functions.

Back-patch to 8.4 (all supported versions).  The non-comment hstore
changes touch code that did not exist in 8.4, so that part stops at 9.0.

Noah Misch and Heikki Linnakangas, reviewed by Tom Lane.

Security: CVE-2014-0064
2014-02-17 09:33:31 -05:00
..
bench Fix whitespace issues found by git diff --check, add gitattributes 2013-11-10 14:48:29 -05:00
data 1. Fixed error with empty array ( '{}' ), 2001-08-04 19:35:32 +00:00
expected Fix longstanding error in contrib/intarray's int[] & int[] operator. 2012-02-16 20:00:11 -05:00
sql Fix longstanding error in contrib/intarray's int[] & int[] operator. 2012-02-16 20:00:11 -05:00
_int_bool.c Predict integer overflow to avoid buffer overruns. 2014-02-17 09:33:31 -05:00
_int_gin.c Replace int2/int4 in C code with int16/int32 2012-06-25 01:51:46 +03:00
_int_gist.c Remove unreachable code 2012-07-16 22:15:03 +03:00
_int_op.c Remove unnecessary #include references, per pgrminclude script. 2011-09-01 10:04:27 -04:00
_int_tool.c intarray: return empty zero-dimensional array for an empty array 2013-09-07 11:44:33 -04:00
_int.h Predict integer overflow to avoid buffer overruns. 2014-02-17 09:33:31 -05:00
_intbig_gist.c Replace int2/int4 in C code with int16/int32 2012-06-25 01:51:46 +03:00
.gitignore Support "make check" in contrib 2011-04-25 22:27:11 +03:00
intarray--1.0.sql Throw a useful error message if an extension script file is fed to psql. 2011-10-12 15:45:03 -04:00
intarray--unpackaged--1.0.sql Throw a useful error message if an extension script file is fed to psql. 2011-10-12 15:45:03 -04:00
intarray.control Convert contrib modules to use the extension facility. 2011-02-13 22:54:49 -05:00
Makefile Convert contrib modules to use the extension facility. 2011-02-13 22:54:49 -05:00