Thread: BUG #1189: unbounded string copy in postmaster

The following bug has been logged online:

Bug reference:      1189
Logged by:          George Gal

Email address:      ggal@vsecurity.com

PostgreSQL version: 7.4

Operating system:   FreeBSD 5.2 (Current)

Description:        unbounded string copy in postmaster

Details:

Looks like the -o command line option doesn't perform any bounds checking on
the option before copying to the ExtraOptions[1024] char array. [line 529 of
postmaster.c]

"PostgreSQL Bugs List" <pgsql-bugs@postgresql.org> writes:
> Looks like the -o command line option doesn't perform any bounds checking on
> the option before copying to the ExtraOptions[1024] char array. [line 529 of
> postmaster.c]

I cannot get super excited about this, since the person or script
starting the postmaster has to be trusted anyway.  But I've tweaked
the code to prevent a buffer overrun here.

            regards, tom lane