Horton

Re: Found a buffer-overflow defect in asynchronous database connection API PQconnectPoll

Sudheer H R <sudheer.hr@tekenlight.com>

View thread View on postgr.es
From: Sudheer H R <sudheer.hr@tekenlight.com>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: pgsql-bugs@lists.postgresql.org
Date: 2021-06-23T14:03:06Z
Lists: pgsql-bugs 
Built with —with-gssapi and the problem occurs again.


Regards,
Sudheer


> On 23-Jun-2021, at 7:21 PM, Sudheer H R <sudheer.hr@tekenlight.com> wrote:
> 
> Is this a compile time flag or a link time flag?
> 
> 
> I will try to build with it and test
> 
>> On 23-Jun-2021, at 7:20 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> 
>> Sudheer H R <sudheer.hr@tekenlight.com> writes:
>>> Just executed defaulted ./configure in the build directory and ran make
>> 
>> The code in question won't even be compiled if you didn't use
>> --with-gssapi, so this proves little.
>> 
>> 			regards, tom lane
>

Commits

  1. Don't assume GSSAPI result strings are null-terminated.