to_char(): prevent accesses beyond the allocated buffer

Bruce Momjian <bruce@momjian.us>

Commit: 5ae3bf1af34082f3b53955053ce11a6f20b1b751
Author: Bruce Momjian <bruce@momjian.us>
Date: 2015-02-02T15:00:50Z
Releases: 9.2.10
to_char():  prevent accesses beyond the allocated buffer

Previously very long field masks for floats could access memory
beyond the existing buffer allocated to hold the result.

Reported by Andres Freund and Peter Geoghegan.	Backpatch to all
supported versions.

Security: CVE-2015-0241

Files

PathChange+/−
src/backend/utils/adt/formatting.c modified +3 −1