Thread: pgsql: Cherry-pick security-relevant fixes from upstream imath library.

Cherry-pick security-relevant fixes from upstream imath library.

This covers alterations to buffer sizing and zeroing made between imath
1.3 and imath 1.20.  Valgrind Memcheck identified the buffer overruns
and reliance on uninitialized data; their exploit potential is unknown.
Builds specifying --with-openssl are unaffected, because they use the
OpenSSL BIGNUM facility instead of imath.  Back-patch to 9.0 (all
supported versions).

Security: CVE-2015-0243

Branch
------
master

Details
-------
http://git.postgresql.org/pg/commitdiff/8b59672d8d23ea4203cf2701d126a96edca5bdd6

Modified Files
--------------
contrib/pgcrypto/imath.c |   24 +++++++++++++++---------
1 file changed, 15 insertions(+), 9 deletions(-)