diff options
author | Tom Lane <tgl@sss.pgh.pa.us> | 2009-07-10 00:32:23 +0000 |
---|---|---|
committer | Tom Lane <tgl@sss.pgh.pa.us> | 2009-07-10 00:32:23 +0000 |
commit | b99751a199742f1b50e0fc3f8249b53d69c8eb88 (patch) | |
tree | f2e5f0bb9f6bb18cfaddea18696a7ff7157876ed /src/backend/utils/adt/arrayutils.c | |
parent | c36aab4e5f14875b0fba3d7df3f53a3ebca97b55 (diff) | |
download | postgresql-b99751a199742f1b50e0fc3f8249b53d69c8eb88.tar.gz postgresql-b99751a199742f1b50e0fc3f8249b53d69c8eb88.zip |
Fix xslt_process() to ensure that it inserts a NULL terminator after the
last pair of parameter name/value strings, even when there are MAXPARAMS
of them. Aboriginal bug in contrib/xml2, noted while studying bug #4912
(though I'm not sure whether there's something else involved in that
report).
This might be thought a security issue, since it's a potential backend
crash; but considering that untrustworthy users shouldn't be allowed
to get their hands on xslt_process() anyway, it's probably not worth
getting excited about.
Diffstat (limited to 'src/backend/utils/adt/arrayutils.c')
0 files changed, 0 insertions, 0 deletions