Hi,

Bruce Momjian <bruce@momjian.us>

Commit: d65a27f9509e8cbd0a0d8a58597bd096c2a22207
Author: Bruce Momjian <bruce@momjian.us>
Date: 1999-12-09T05:02:24Z
Releases: 7.1.1
Hi,

I was able to crash postgres 6.5.3 when I did an 'alter user' command.
After I started a debugger I found the problem in the timezone handling
of
datetime (my Linux box lost its timezone information, that's how the
problem occurred).

Only 7 bytes are reserved for the timezone, without checking for
boundaries.

Attached is a patch that fixes this problem and emits a NOTICE if a
timezone is encountered that is longer than MAXTZLEN bytes, like this:

Jeroen van Vianen

Files

PathChange+/−
src/backend/utils/adt/dt.c modified +3 −3
src/backend/utils/adt/nabstime.c modified +21 −3