Horton

Re: BUG #18614: [ECPG] out of bound in DecodeDateTime

Michael Paquier <michael@paquier.xyz>

View thread View on postgr.es
From: Michael Paquier <michael@paquier.xyz>
To: Павел Некрасов <p.nekrasov@fobos-nt.ru>
Cc: Bruce Momjian <bruce@momjian.us>, pgsql-bugs@lists.postgresql.org
Date: 2024-10-24T22:25:26Z
Lists: pgsql-bugs 
On Thu, Oct 24, 2024 at 12:09:10PM +0300, Павел Некрасов wrote:
> I would like to clarify two points:
> 
> 1. Are there any known examples of large open-source projects that
> actively use the ecpg?

Yes, some large organizations use it.

> 2. Do you think it would be appropriate to assign a CVE for this bug?

Nope, this issue does not qualify as worth a CVE when it comes to
PostgreSQL.
--
Michael

Commits

  1. ecpg: Fix out-of-bound read in DecodeDateTime()