diff options
| author | Tom Lane <tgl@sss.pgh.pa.us> | 2016-03-23 10:43:13 -0400 |
|---|---|---|
| committer | Tom Lane <tgl@sss.pgh.pa.us> | 2016-03-23 10:43:24 -0400 |
| commit | 5f95521b3a4ede720d8927383d79b11e37b6bc80 (patch) | |
| tree | 3a532ff5db6d84b7c2d866d5c3660f9e0050ba70 /src/backend/utils/adt/arrayfuncs.c | |
| parent | 147112d0984331d92b8c2faad885788c7cfd9fd2 (diff) | |
| download | postgresql-5f95521b3a4ede720d8927383d79b11e37b6bc80.tar.gz postgresql-5f95521b3a4ede720d8927383d79b11e37b6bc80.zip | |
Fix unsafe use of strtol() on a non-null-terminated Text datum.
jsonb_set() could produce wrong answers or incorrect error reports, or in
the worst case even crash, when trying to convert a path-array element into
an integer for use as an array subscript. Per report from Vitaly Burovoy.
Back-patch to 9.5 where the faulty code was introduced (in commit
c6947010ceb42143).
Michael Paquier
Diffstat (limited to 'src/backend/utils/adt/arrayfuncs.c')
0 files changed, 0 insertions, 0 deletions