aboutsummaryrefslogtreecommitdiff
path: root/doc/src/sgml/ref/postgres-ref.sgml
diff options
context:
space:
mode:
authorTom Lane <tgl@sss.pgh.pa.us>2016-03-29 11:54:57 -0400
committerTom Lane <tgl@sss.pgh.pa.us>2016-03-29 11:54:57 -0400
commit11cc7bb8825efc74c9418f6e88d448cc253c47b0 (patch)
tree8046e4ed03a6b3bf5ca63952dc776231b17c225a /doc/src/sgml/ref/postgres-ref.sgml
parenta3c643938166abed9a390cdbd8a5df09bfe39523 (diff)
downloadpostgresql-11cc7bb8825efc74c9418f6e88d448cc253c47b0.tar.gz
postgresql-11cc7bb8825efc74c9418f6e88d448cc253c47b0.zip
Avoid possibly-unsafe use of Windows' FormatMessage() function.
Whenever this function is used with the FORMAT_MESSAGE_FROM_SYSTEM flag, it's good practice to include FORMAT_MESSAGE_IGNORE_INSERTS as well. Otherwise, if the message contains any %n insertion markers, the function will try to fetch argument strings to substitute --- which we are not passing, possibly leading to a crash. This is exactly analogous to the rule about not giving printf() a format string you're not in control of. Noted and patched by Christian Ullrich. Back-patch to all supported branches.
Diffstat (limited to 'doc/src/sgml/ref/postgres-ref.sgml')
0 files changed, 0 insertions, 0 deletions