to_char(): prevent writing beyond the allocated buffer

Bruce Momjian <bruce@momjian.us>

Commit: fe2526990b821efb9452fa8601ee216a487202ff
Author: Bruce Momjian <bruce@momjian.us>
Date: 2015-02-02T15:00:50Z
Releases: 9.3.6
to_char():  prevent writing beyond the allocated buffer

Previously very long localized month and weekday strings could
overflow the allocated buffers, causing a server crash.

Reported and patch reviewed by Noah Misch.  Backpatch to all
supported versions.

Security: CVE-2015-0241

Files

PathChange+/−
src/backend/utils/adt/formatting.c modified +125 −14