"PostgreSQL Bugs List" <pgsql-bugs(at)postgresql(dot)org> writes:
> Looks like the -o command line option doesn't perform any bounds checking on
> the option before copying to the ExtraOptions[1024] char array. [line 529 of
> postmaster.c]
I cannot get super excited about this, since the person or script
starting the postmaster has to be trusted anyway. But I've tweaked
the code to prevent a buffer overrun here.
regards, tom lane