aboutsummaryrefslogtreecommitdiff
path: root/src/backend/parser/parse_expr.c
diff options
context:
space:
mode:
authorTom Lane <tgl@sss.pgh.pa.us>2023-03-14 19:17:31 -0400
committerTom Lane <tgl@sss.pgh.pa.us>2023-03-14 19:17:31 -0400
commitb081fe4199b69dc561f7d31c6a82b3ad996f657f (patch)
tree75cdcdaf8a38e35b09677d74fd4ecb5a11848292 /src/backend/parser/parse_expr.c
parenta563c24c9574b74f4883c004c89275bba03c3c26 (diff)
downloadpostgresql-b081fe4199b69dc561f7d31c6a82b3ad996f657f.tar.gz
postgresql-b081fe4199b69dc561f7d31c6a82b3ad996f657f.zip
Fix corner case bug in numeric to_char() some more.
The band-aid applied in commit f0bedf3e4 turns out to still need some work: it made sure we didn't set Np->last_relevant too small (to the left of the decimal point), but it didn't prevent setting it too large (off the end of the partially-converted string). This could result in fetching data beyond the end of the allocated space, which with very bad luck could cause a SIGSEGV, though I don't see any hazard of interesting memory disclosure. Per bug #17839 from Thiago Nunes. The bug's pretty ancient, so back-patch to all supported versions. Discussion: https://postgr.es/m/17839-aada50db24d7b0da@postgresql.org
Diffstat (limited to 'src/backend/parser/parse_expr.c')
0 files changed, 0 insertions, 0 deletions