diff options
| author | Tom Lane <tgl@sss.pgh.pa.us> | 2009-07-10 00:32:00 +0000 |
|---|---|---|
| committer | Tom Lane <tgl@sss.pgh.pa.us> | 2009-07-10 00:32:00 +0000 |
| commit | e7370babd1865911c4b7534f13a63ce01d8ca9e9 (patch) | |
| tree | bf905971ae1f9cedb359a2731472c95990d270ba /src/backend/parser/parse_utilcmd.c | |
| parent | b11ce5608ab7b053478a6180d98818c02df40f46 (diff) | |
| download | postgresql-e7370babd1865911c4b7534f13a63ce01d8ca9e9.tar.gz postgresql-e7370babd1865911c4b7534f13a63ce01d8ca9e9.zip | |
Fix xslt_process() to ensure that it inserts a NULL terminator after the
last pair of parameter name/value strings, even when there are MAXPARAMS
of them. Aboriginal bug in contrib/xml2, noted while studying bug #4912
(though I'm not sure whether there's something else involved in that
report).
This might be thought a security issue, since it's a potential backend
crash; but considering that untrustworthy users shouldn't be allowed
to get their hands on xslt_process() anyway, it's probably not worth
getting excited about.
Diffstat (limited to 'src/backend/parser/parse_utilcmd.c')
0 files changed, 0 insertions, 0 deletions