Re: BUG #16793: Libxml2 contains a null pointer dereference flaw in xpath.c - Mailing list pgsql-bugs

From Tom Lane
Subject Re: BUG #16793: Libxml2 contains a null pointer dereference flaw in xpath.c
Date
Msg-id 1598376.1609168450@sss.pgh.pa.us
Whole thread Raw
In response to BUG #16793: Libxml2 contains a null pointer dereference flaw in xpath.c  (PG Bug reporting form <noreply@postgresql.org>)
List pgsql-bugs
PG Bug reporting form <noreply@postgresql.org> writes:
> Libxml2 contains a null pointer dereference flaw in xpath.c that is
> triggered when handling errors for xpointer expressions. this may allow a
> context-dependent attacker to crash a process linked against the library.

Why are you reporting this here, and not to the libxml2 authors?
There's nothing we can do about it.

            regards, tom lane



pgsql-bugs by date:

Previous
From: Michael Paquier
Date:
Subject: Re: Large objects and out-of-memory
Next
From: Tom Lane
Date:
Subject: Re: Missing compiled default for channel_binding param from PQconndefaults