diff options
| author | Noah Misch <noah@leadboat.com> | 2015-02-02 10:00:45 -0500 |
|---|---|---|
| committer | Noah Misch <noah@leadboat.com> | 2015-02-02 10:00:49 -0500 |
| commit | 82806cf4e5442db51f1ca62631ea15b3343a9a76 (patch) | |
| tree | 8f782ea82536c73d81ceaa88eee1c946df2d7875 /src/backend/tcop/postgres.c | |
| parent | 2ac95c83ce9321cb428bf3508a606df31c762ef1 (diff) | |
| download | postgresql-82806cf4e5442db51f1ca62631ea15b3343a9a76.tar.gz postgresql-82806cf4e5442db51f1ca62631ea15b3343a9a76.zip | |
Fix buffer overrun after incomplete read in pullf_read_max().
Most callers pass a stack buffer. The ensuing stack smash can crash the
server, and we have not ruled out the viability of attacks that lead to
privilege escalation. Back-patch to 9.0 (all supported versions).
Marko Tiikkaja
Security: CVE-2015-0243
Diffstat (limited to 'src/backend/tcop/postgres.c')
0 files changed, 0 insertions, 0 deletions