postgres

History

Noah Misch 98be8a6eaa Predict integer overflow to avoid buffer overruns. Several functions, mostly type input functions, calculated an allocation size such that the calculation wrapped to a small positive value when arguments implied a sufficiently-large requirement. Writes past the end of the inadvertent small allocation followed shortly thereafter. Coverity identified the path_in() vulnerability; code inspection led to the rest. In passing, add check_stack_depth() to prevent stack overflow in related functions. Back-patch to 8.4 (all supported versions). The non-comment hstore changes touch code that did not exist in 8.4, so that part stops at 9.0. Noah Misch and Heikki Linnakangas, reviewed by Tom Lane. Security: CVE-2014-0064		12 years ago
..
bench	Add CVS tag lines to files that were lacking them.	20 years ago
data	…
expected	Fix longstanding error in contrib/intarray's int[] & int[] operator.	14 years ago
sql	Fix longstanding error in contrib/intarray's int[] & int[] operator.	14 years ago
.gitignore	Some more gitignore cleanups: cover contrib and PL regression test outputs.	15 years ago
Makefile	Remove references to READMEs from /contrib Makefiles.	18 years ago
_int.h	Predict integer overflow to avoid buffer overruns.	12 years ago
_int.sql.in	Mark contrib's GiST and GIN opclass support functions as STRICT, for safety.	17 years ago
_int_bool.c	Predict integer overflow to avoid buffer overruns.	12 years ago
_int_gin.c	Fix ginint4_queryextract() to actually do what it was intended to do for an	16 years ago
_int_gist.c	8.4 pgindent run, with new combined Linux/FreeBSD/MinGW typedef list	17 years ago
_int_op.c	8.4 pgindent run, with new combined Linux/FreeBSD/MinGW typedef list	17 years ago
_int_tool.c	Fix longstanding error in contrib/intarray's int[] & int[] operator.	14 years ago
_intbig_gist.c	8.4 pgindent run, with new combined Linux/FreeBSD/MinGW typedef list	17 years ago
uninstall__int.sql	Revert my patch of 2009-04-04 that removed contrib/intarray's definitions of	17 years ago