You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Noah Misch 627acc3caa With GB18030, prevent SIGSEGV from reading past end of allocation. ... With GB18030 as source encoding, applications could crash the server via SQL functions convert() or convert_from(). Applications themselves could crash after passing unterminated GB18030 input to libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeStringConn(), or PQescapeString(). Extension code could crash by passing unterminated GB18030 input to jsonapi.h functions. All those functions have been intended to handle untrusted, unterminated input safely. A crash required allocating the input such that the last byte of the allocation was the last byte of a virtual memory page. Some malloc() implementations take measures against that, making the SIGSEGV hard to reach. Back-patch to v13 (all supported versions). Author: Noah Misch <noah@leadboat.com> Author: Andres Freund <andres@anarazel.de> Reviewed-by: Masahiko Sawada <sawada.mshk@gmail.com> Backpatch-through: 13 Security: CVE-2025-4207		8 months ago
..
backend	With GB18030, prevent SIGSEGV from reading past end of allocation.	8 months ago
bin	Translation updates	8 months ago
common	With GB18030, prevent SIGSEGV from reading past end of allocation.	8 months ago
fe_utils	Fix incorrect format placeholders	8 months ago
include	With GB18030, prevent SIGSEGV from reading past end of allocation.	8 months ago
interfaces	With GB18030, prevent SIGSEGV from reading past end of allocation.	8 months ago
makefiles	oauth: Move the builtin flow into a separate module	8 months ago
pl	Translation updates	8 months ago
port	Match parameter in new function to earlier equivalents	8 months ago
template	…
test	With GB18030, prevent SIGSEGV from reading past end of allocation.	8 months ago
timezone	Update time zone data files to tzdata release 2025b.	8 months ago
tools	Revert "Refactor ChangeVarNodesExtended() using the custom callback"	8 months ago
tutorial	Doc: simplify the tutorial's window-function examples.	12 months ago
.gitignore	…
DEVELOPERS	…
Makefile	…
Makefile.global.in	oauth: Move the builtin flow into a separate module	8 months ago
Makefile.shlib	…
meson.build	Update copyright for 2025	1 year ago
nls-global.mk	…