diff options
author | Tom Lane <tgl@sss.pgh.pa.us> | 2009-07-10 00:32:06 +0000 |
---|---|---|
committer | Tom Lane <tgl@sss.pgh.pa.us> | 2009-07-10 00:32:06 +0000 |
commit | c75b054b0d9fee984b0f2a8cee26a7cd029309ea (patch) | |
tree | 8db96f71bb17d8cf04f652874644249e029881fb /src/backend/utils/adt/array_userfuncs.c | |
parent | 4f6bcc83144d7efa7df542e856bad611f51b449a (diff) | |
download | postgresql-c75b054b0d9fee984b0f2a8cee26a7cd029309ea.tar.gz postgresql-c75b054b0d9fee984b0f2a8cee26a7cd029309ea.zip |
Fix xslt_process() to ensure that it inserts a NULL terminator after the
last pair of parameter name/value strings, even when there are MAXPARAMS
of them. Aboriginal bug in contrib/xml2, noted while studying bug #4912
(though I'm not sure whether there's something else involved in that
report).
This might be thought a security issue, since it's a potential backend
crash; but considering that untrustworthy users shouldn't be allowed
to get their hands on xslt_process() anyway, it's probably not worth
getting excited about.
Diffstat (limited to 'src/backend/utils/adt/array_userfuncs.c')
0 files changed, 0 insertions, 0 deletions