pgsql: Introduce safer encoding and decoding routines for base64.c

From: Michael Paquier <michael(at)paquier(dot)xyz>
To: pgsql-committers(at)lists(dot)postgresql(dot)org
Subject: pgsql: Introduce safer encoding and decoding routines for base64.c
Date: 2019-07-04 07:12:48
Message-ID: E1hivvE-0002Vp-6Q@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

Introduce safer encoding and decoding routines for base64.c

This is a follow-up refactoring after 09ec55b and b674211, which has
proved that the encoding and decoding routines used by SCRAM have a
poor interface when it comes to check after buffer overflows. This adds
an extra argument in the shape of the length of the result buffer for
each routine, which is used for overflow checks when encoding or
decoding an input string. The original idea comes from Tom Lane.

As a result of that, the encoding routine can now fail, so all its
callers are adjusted to generate proper error messages in case of
problems.

On failure, the result buffer gets zeroed.

Author: Michael Paquier
Reviewed-by: Daniel Gustafsson
Discussion: https://postgr.es/m/20190623132535.GB1628@paquier.xyz

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/cfc40d384ae51ea2886d599d2008ae57b529e6ea

Modified Files
--------------
src/backend/libpq/auth-scram.c | 74 +++++++++++++++++++++++++++---------
src/common/base64.c | 59 ++++++++++++++++++++++++----
src/common/scram-common.c | 59 +++++++++++++++++++++++++---
src/include/common/base64.h | 4 +-
src/interfaces/libpq/fe-auth-scram.c | 60 +++++++++++++++++++++++------
5 files changed, 210 insertions(+), 46 deletions(-)

Browse pgsql-committers by date

  From Date Subject
Next Message Peter Eisentraut 2019-07-04 11:36:17 pgsql: Sync our Snowball stemmer dictionaries with current upstream
Previous Message Andrew Gierth 2019-07-04 05:57:19 Re: UCT (Re: pgsql: Update time zone data files to tzdata release 2019a.)