Noah Misch 627acc3caa With GB18030, prevent SIGSEGV from reading past end of allocation. With GB18030 as source encoding, applications could crash the server via SQL functions convert() or convert_from(). Applications themselves could crash after passing unterminated GB18030 input to libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeStringConn(), or PQescapeString(). Extension code could crash by passing unterminated GB18030 input to jsonapi.h functions. All those functions have been intended to handle untrusted, unterminated input safely. A crash required allocating the input such that the last byte of the allocation was the last byte of a virtual memory page. Some malloc() implementations take measures against that, making the SIGSEGV hard to reach. Back-patch to v13 (all supported versions). Author: Noah Misch <noah@leadboat.com> Author: Andres Freund <andres@anarazel.de> Reviewed-by: Masahiko Sawada <sawada.mshk@gmail.com> Backpatch-through: 13 Security: CVE-2025-4207		8 months ago
.github	Add CODE_OF_CONDUCT.md, CONTRIBUTING.md, and SECURITY.md.	2 years ago
config	oauth: Move the builtin flow into a separate module	8 months ago
contrib	oauth: Disallow OAuth connections via postgres_fdw/dblink	8 months ago
doc	doc PG 18 relnotes: adjust COPY and REJECT_LIMIT items	8 months ago
src	With GB18030, prevent SIGSEGV from reading past end of allocation.	8 months ago
.cirrus.star	Remove duplicate words in docs and code comments.	2 years ago
.cirrus.tasks.yml	ci: Check for missing dependencies in meson builds	9 months ago
.cirrus.yml	ci: Test NetBSD and OpenBSD	11 months ago
.dir-locals.el	…
.editorconfig	Add script to keep .editorconfig in sync with .gitattributes	11 months ago
.git-blame-ignore-revs	Add `918e7287e` to .git-blame-ignore-revs	8 months ago
.gitattributes	Add script to keep .editorconfig in sync with .gitattributes	11 months ago
.gitignore	Update top-level .gitignore.	3 years ago
.mailmap	Add a Git .mailmap file	1 year ago
COPYRIGHT	Update copyright for 2025	12 months ago
GNUmakefile.in	Allow selecting the git revision to be packaged by "make dist".	2 years ago
HISTORY	Canonicalize some URLs	6 years ago
Makefile	Remove AIX support	2 years ago
README.md	Revise the style of a paragraph in README.md.	2 years ago
aclocal.m4	autoconf: Move export_dynamic determination to configure	3 years ago
configure	oauth: Move the builtin flow into a separate module	8 months ago
configure.ac	oauth: Move the builtin flow into a separate module	8 months ago
meson.build	oauth: Move the builtin flow into a separate module	8 months ago
meson_options.txt	Add support for basic NUMA awareness	9 months ago

README.md

PostgreSQL Database Management System

This directory contains the source code distribution of the PostgreSQL database management system.

PostgreSQL is an advanced object-relational database management system that supports an extended subset of the SQL standard, including transactions, foreign keys, subqueries, triggers, user-defined types and functions. This distribution also contains C language bindings.

General documentation about this version of PostgreSQL can be found at https://www.postgresql.org/docs/devel/. In particular, information about building PostgreSQL from the source code can be found at https://www.postgresql.org/docs/devel/installation.html.

The latest version of this software, and related software, may be obtained at https://www.postgresql.org/download/. For more information look at our web site located at https://www.postgresql.org/.