Revision e1f7173ea19ad8977311dc72fe50492fae5c078d authored by Peter Eisentraut on 23 November 2013, 12:25:37 UTC, committed by Peter Eisentraut on 23 November 2013, 12:31:07 UTC
A pointer to a C string was treated as a pointer to a "name" datum and passed to SPI_execute_plan(). This pointer would then end up being passed through datumCopy(), which would try to copy the entire 64 bytes of name data, thus running past the end of the C string. Fix by converting the string to a proper name structure. Found by LLVM AddressSanitizer.
1 parent 92a7521
| File | Mode | Size |
|---|---|---|
| config | ||
| contrib | ||
| doc | ||
| src | ||
| .gitignore | -rw-r--r-- | 360 bytes |
| COPYRIGHT | -rw-r--r-- | 1.2 KB |
| GNUmakefile.in | -rw-r--r-- | 3.7 KB |
| Makefile | -rw-r--r-- | 1.5 KB |
| README | -rw-r--r-- | 1.3 KB |
| README.git | -rw-r--r-- | 816 bytes |
| aclocal.m4 | -rw-r--r-- | 385 bytes |
| configure | -rwxr-xr-x | 850.2 KB |
| configure.in | -rw-r--r-- | 62.7 KB |
Computing file changes ...
