Horton

Re: Found a buffer-overflow defect in asynchronous database connection API PQconnectPoll

Tom Lane <tgl@sss.pgh.pa.us>

View thread View on postgr.es
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Sudheer H R <sudheer.hr@tekenlight.com>
Cc: pgsql-bugs@lists.postgresql.org
Date: 2021-06-23T13:50:25Z
Lists: pgsql-bugs 
Sudheer H R <sudheer.hr@tekenlight.com> writes:
> Just executed defaulted ./configure in the build directory and ran make

The code in question won't even be compiled if you didn't use
--with-gssapi, so this proves little.

			regards, tom lane

Commits

  1. Don't assume GSSAPI result strings are null-terminated.