diff options
| author | Bruce Momjian <bruce@momjian.us> | 2015-02-02 10:00:45 -0500 |
|---|---|---|
| committer | Bruce Momjian <bruce@momjian.us> | 2015-02-02 10:00:51 -0500 |
| commit | 98f2479d8271934ae6ec43a450e11506df015051 (patch) | |
| tree | e8bee9ccb4f2e4580c22d9ad4b2857b51dbf64a3 /src/backend/tcop/postgres.c | |
| parent | 2ceb63deb2db905ac030130705e33d776a28472a (diff) | |
| download | postgresql-98f2479d8271934ae6ec43a450e11506df015051.tar.gz postgresql-98f2479d8271934ae6ec43a450e11506df015051.zip | |
port/snprintf(): fix overflow and do padding
Prevent port/snprintf() from overflowing its local fixed-size
buffer and pad to the desired number of digits with zeros, even
if the precision is beyond the ability of the native sprintf().
port/snprintf() is only used on systems that lack a native
snprintf().
Reported by Bruce Momjian. Patch by Tom Lane. Backpatch to all
supported versions.
Security: CVE-2015-0242
Diffstat (limited to 'src/backend/tcop/postgres.c')
0 files changed, 0 insertions, 0 deletions