diff options
| author | Noah Misch <noah@leadboat.com> | 2015-02-02 10:00:45 -0500 |
|---|---|---|
| committer | Noah Misch <noah@leadboat.com> | 2015-02-02 10:00:52 -0500 |
| commit | ce6f261cd2df5f166ee21d54c4ad13f535193035 (patch) | |
| tree | f50b1f879428344f9d189464afe2df50d334d0e6 /src/backend/tcop/postgres.c | |
| parent | 9e05c5063eb01ce52618f29fe975696dc4495e6f (diff) | |
| download | postgresql-ce6f261cd2df5f166ee21d54c4ad13f535193035.tar.gz postgresql-ce6f261cd2df5f166ee21d54c4ad13f535193035.zip | |
Fix buffer overrun after incomplete read in pullf_read_max().
Most callers pass a stack buffer. The ensuing stack smash can crash the
server, and we have not ruled out the viability of attacks that lead to
privilege escalation. Back-patch to 9.0 (all supported versions).
Marko Tiikkaja
Security: CVE-2015-0243
Diffstat (limited to 'src/backend/tcop/postgres.c')
0 files changed, 0 insertions, 0 deletions