On 02.10.2012 01:30, Hitoshi Harada wrote:
> It seems date_in() has a risk of buffer overrun. If the input is '.',
> it sets field to the beginning of workbuf and goes into
> DecodeDate(). This function checks null-termination of the head of
> string, but it can go beyond the end of string inside the first loop
> and replace some bytes with zero. The worst scenario we've seen is
> overwrite of the stack frame, in which the compiler rearranged the
> memory allocation of local variables in date_in() and work_buf is at
> lower address than field.
> I tried to attach a patch file but failed somehow, so I paste the fix here.
Thanks, applied to master and all supported back-branches.
In response to
pgsql-hackers by date
|Next:||From: Heikki Linnakangas||Date: 2012-10-02 08:26:24|
|Subject: Re: BUG #7534: walreceiver takes long time to detect n/w breakdown|
|Previous:||From: Alexander Korotkov||Date: 2012-10-02 07:45:56|
|Subject: Patch for removng unused targets|