to_char(): prevent accesses beyond the allocated buffer

Enterprise / PostgreSQL - Bruce Momjian [momjian.us] - 2 February 2015 09:00 UTC

Previously very long field masks for floats could access memory beyond the existing buffer allocated to hold the result.

Reported by Andres Freund and Peter Geoghegan. Backpatch to all supported versions.

Security: CVE-2015-0241

0150ab5 to_char(): prevent accesses beyond the allocated buffer
src/backend/utils/adt/formatting.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)

Upstream: git.postgresql.org

  • Share