pgsql: Fix array overrun in ecpg's version of ParseDateTime(). - Mailing list pgsql-committers

From Tom Lane
Subject pgsql: Fix array overrun in ecpg's version of ParseDateTime().
Date
Msg-id E1XbJVz-00011W-9A@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Fix array overrun in ecpg's version of ParseDateTime().

The code wrote a value into the caller's field[] array before checking
to see if there was room, which of course is backwards.  Per report from
Michael Paquier.

I fixed the equivalent bug in the backend's version of this code way back
in 630684d3a130bb93, but failed to think about ecpg's copy.  Fortunately
this doesn't look like it would be exploitable for anything worse than a
core dump: an external attacker would have no control over the single word
that gets written.

Branch
------
REL9_3_STABLE

Details
-------
http://git.postgresql.org/pg/commitdiff/d3cfe20c6dc498f9294d07c7803a8cc776f8db31

Modified Files
--------------
src/interfaces/ecpg/pgtypeslib/dt_common.c |    3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)


pgsql-committers by date:

Previous
From: Tom Lane
Date:
Subject: pgsql: Fix array overrun in ecpg's version of ParseDateTime().
Next
From: Tom Lane
Date:
Subject: pgsql: Fix array overrun in ecpg's version of ParseDateTime().