Horton

Null-terminate the output buffer of LZ4Stream_gets

Tomas Vondra <tomas.vondra@postgresql.org>

View on postgr.es
Commit: 3c18d90f8907e53c3021fca13ad046133c480e4d
Author: Tomas Vondra <tomas.vondra@postgresql.org>
Date: 2023-05-17T14:35:30Z
Releases: 16.0 
Null-terminate the output buffer of LZ4Stream_gets

LZ4Stream_gets did not null-terminate its output buffer. The callers expected
the buffer to be null-terminated and passed it around to functions such as
sscanf with unintended consequences.

Author: Georgios Kokolatos <gkokolatos@pm.me>
Reported-by: Alexander Lakhin <exclusion@gmail.com>
Discussion: https://postgr.es/m/94ae9bca-5ebb-1e68-bb7b-4f32e89fefbe@gmail.com

Files

PathChange+/−
src/bin/pg_dump/compress_lz4.c modified +11 −1

Discussion