Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <pgsql-bugs-owner+archive@lists.postgresql.org>)
	id 1t3zF0-00FlBu-Lo
	for pgsql-bugs@arkaria.postgresql.org; Thu, 24 Oct 2024 14:55:10 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.94.2)
	(envelope-from <pgsql-bugs-owner+archive@lists.postgresql.org>)
	id 1t3zE0-0045EI-Vt
	for pgsql-bugs@arkaria.postgresql.org; Thu, 24 Oct 2024 14:54:09 +0000
Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29])
	by malur.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <p.nekrasov@fobos-nt.ru>)
	id 1t3tqH-001OVj-KK
	for pgsql-bugs@lists.postgresql.org; Thu, 24 Oct 2024 09:09:17 +0000
Received: from ksmg.fobos-nt.ru ([90.154.37.67])
	by magus.postgresql.org with esmtps  (TLS1.2) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <p.nekrasov@fobos-nt.ru>)
	id 1t3tqE-002hvh-5E
	for pgsql-bugs@lists.postgresql.org; Thu, 24 Oct 2024 09:09:15 +0000
Received: from ksmg.fobos-nt.ru (localhost [127.0.0.1])
	by ksmg.fobos-nt.ru (Postfix) with ESMTP id 885511A0003;
	Thu, 24 Oct 2024 12:09:11 +0300 (MSK)
Received: from mail.fobos-nt.ru (kerio.fobos.nt [192.168.215.3])
	by ksmg.fobos-nt.ru (Postfix) with ESMTP;
	Thu, 24 Oct 2024 12:09:11 +0300 (MSK)
Date: Thu, 24 Oct 2024 12:09:10 +0300 (MSK)
From: =?utf-8?B?0J/QsNCy0LXQuyDQndC10LrRgNCw0YHQvtCy?=
 <p.nekrasov@fobos-nt.ru>
To: Michael Paquier <michael@paquier.xyz>, Bruce Momjian <bruce@momjian.us>
Cc: pgsql-bugs@lists.postgresql.org
Message-ID: <1964872402.1671046.1729760950957.JavaMail.zimbra@fobos-nt.ru>
In-Reply-To: <Zxg3P25sHvqhW6KG@paquier.xyz>
References: <18614-6bbe00117352309e@postgresql.org>
 <Zw2Su7kkYYF8nHQY@momjian.us> <Zw8GQrLHlgJlz3Qc@paquier.xyz>
 <ZxFJX8Jjoy8T-67v@momjian.us> <ZxH3ZGK19VxTJcpU@paquier.xyz>
 <Zxc97vmDiFzNYylT@paquier.xyz> <Zxg3P25sHvqhW6KG@paquier.xyz>
Subject: Re: BUG #18614: [ECPG] out of bound in DecodeDateTime
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [192.168.215.3]
X-Mailer: Zimbra 8.8.15_GA_4101 (ZimbraWebClient - GC126 (Win)/8.8.15_GA_4059)
Thread-Topic: BUG #18614: [ECPG] out of bound in DecodeDateTime
Thread-Index: LAXEzaIrUx/v/JKuXnc7vFnBHAYxug==
X-KSMG-Rule-ID: 1
X-KSMG-Message-Action: skipped, MessageAuthentication
X-KSMG-AntiSpam-Lua-Profiles: 188681 [Oct 24 2024]
X-KSMG-AntiSpam-Version: 6.1.0.4
X-KSMG-AntiSpam-Envelope-From: p.nekrasov@fobos-nt.ru
X-KSMG-AntiSpam-Rate: 0
X-KSMG-AntiSpam-Status: not_detected
X-KSMG-AntiSpam-Method: none
X-KSMG-AntiSpam-Auth: dkim=none
X-KSMG-AntiSpam-Info: LuaCore: 40 0.3.40
 cefee68357d12c80cb9cf2bdcf92256b1d238d22,
 {Tracking_from_domain_doesnt_match_to}, FromAlignment: s
X-MS-Exchange-Organization-SCL: -1
X-KSMG-AntiSpam-Interceptor-Info: scan successful
X-KSMG-AntiPhishing: Clean
X-KSMG-LinksScanning: Clean
X-KSMG-AntiVirus: Kaspersky Secure Mail Gateway, version 2.0.1.6960,
 bases: 2024/10/24 05:46:00 #26794772
X-KSMG-AntiVirus-Status: Clean, skipped
List-Id: <pgsql-bugs.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-bugs@lists.postgresql.org>
List-Owner: <mailto:pgsql-bugs-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-bugs>
Archived-At: 
 <https://www.postgresql.org/message-id/1964872402.1671046.1729760950957.JavaMail.zimbra%40fobos-nt.ru>
Precedence: bulk

Hello,

I would like to clarify two points:

1. Are there any known examples of large open-source projects that actively use the ecpg?

2. Do you think it would be appropriate to assign a CVE for this bug?

Best regards,  
Pavel Nekrasov  
Fobos-NT