Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lw3Gw-0007gg-2X for pgsql-bugs@arkaria.postgresql.org; Wed, 23 Jun 2021 13:50:30 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1lw3Gv-0004Qi-0h for pgsql-bugs@arkaria.postgresql.org; Wed, 23 Jun 2021 13:50:29 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lw3Gu-0004Pk-Pu for pgsql-bugs@lists.postgresql.org; Wed, 23 Jun 2021 13:50:28 +0000 Received: from sss.pgh.pa.us ([66.207.139.130]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lw3Gr-0007Ov-UU for pgsql-bugs@lists.postgresql.org; Wed, 23 Jun 2021 13:50:27 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.15.2/8.15.2) with ESMTP id 15NDoPA92081780; Wed, 23 Jun 2021 09:50:25 -0400 From: Tom Lane To: Sudheer H R cc: pgsql-bugs@lists.postgresql.org Subject: Re: Found a buffer-overflow defect in asynchronous database connection API PQconnectPoll In-reply-to: References: <5372B6D4-8276-42C0-B8FB-BD0918826FC3@tekenlight.com> <2080223.1624454678@sss.pgh.pa.us> <96EB194C-6EF0-4F79-A855-F28CD7DE4F95@tekenlight.com> <205CACC4-0EBF-4672-95F4-2E1949371FE7@tekenlight.com> <2081383.1624455807@sss.pgh.pa.us> Comments: In-reply-to Sudheer H R message dated "Wed, 23 Jun 2021 19:15:25 +0530" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <2081778.1624456225.1@sss.pgh.pa.us> Date: Wed, 23 Jun 2021 09:50:25 -0400 Message-ID: <2081779.1624456225@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Sudheer H R writes: > Just executed defaulted ./configure in the build directory and ran make The code in question won't even be compiled if you didn't use --with-gssapi, so this proves little. regards, tom lane