You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Peter Eisentraut 9a46324fd4 Fix several one-byte buffer over-reads in to_number ... Several places in NUM_numpart_from_char(), which is called from the SQL function to_number(text, text), could accidentally read one byte past the end of the input buffer (which comes from the input text datum and is not null-terminated). 1. One leading space character would be skipped, but there was no check that the input was at least one byte long. This does not happen in practice, but for defensiveness, add a check anyway. 2. Commit 4a3a1e2cf apparently accidentally doubled that code that skips one space character (so that two spaces might be skipped), but there was no overflow check before skipping the second byte. Fix by removing that duplicate code. 3. A logic error would allow a one-byte over-read when looking for a trailing sign (S) placeholder. In each case, the extra byte cannot be read out directly, but looking at it might cause a crash. The third item was discovered by Piotr Stefaniak, the first two were found and analyzed by Tom Lane and Peter Eisentraut.		10 years ago
..
backend	Fix several one-byte buffer over-reads in to_number	10 years ago
bin	Translation updates	10 years ago
common	pgindent run for 9.6	10 years ago
fe_utils	Obstruct shell, SQL, and conninfo injection via database and role names.	10 years ago
include	Obstruct shell, SQL, and conninfo injection via database and role names.	10 years ago
interfaces	Translation updates	10 years ago
makefiles	…
pl	Translation updates	10 years ago
port	Promote pg_dumpall shell/connstr quoting functions to src/fe_utils.	10 years ago
template	…
test	Fix two errors with nested CASE/WHEN constructs.	10 years ago
timezone	Update time zone data files to tzdata release 2016f.	10 years ago
tools	Obstruct shell, SQL, and conninfo injection via database and role names.	10 years ago
tutorial	…
.gitignore	…
DEVELOPERS	…
Makefile	Create src/fe_utils/, and move stuff into there from pg_dump's dumputils.	10 years ago
Makefile.global.in	Provide and use a makefile target to build all generated headers.	10 years ago
Makefile.shlib	Make the AIX case of Makefile.shlib safe for parallel make.	10 years ago
bcc32.mak	…
nls-global.mk	nls-global.mk: search build dir for source files, too	10 years ago
win32.mak	…