Fix xslt_process() to ensure that it inserts a NULL terminator after the

Tom Lane <tgl@sss.pgh.pa.us>

Commit: c75b054b0d9fee984b0f2a8cee26a7cd029309ea
Author: Tom Lane <tgl@sss.pgh.pa.us>
Date: 2009-07-10T00:32:06Z
Releases: 8.4.1
Fix xslt_process() to ensure that it inserts a NULL terminator after the
last pair of parameter name/value strings, even when there are MAXPARAMS
of them.  Aboriginal bug in contrib/xml2, noted while studying bug #4912
(though I'm not sure whether there's something else involved in that
report).

This might be thought a security issue, since it's a potential backend
crash; but considering that untrustworthy users shouldn't be allowed
to get their hands on xslt_process() anyway, it's probably not worth
getting excited about.

Files

PathChange+/−
contrib/xml2/xslt_proc.c modified +12 −8