Received: from maia.hub.org (unknown [200.46.204.183]) by mail.postgresql.org (Postfix) with ESMTP id A4F31634758 for ; Thu, 9 Jul 2009 21:32:35 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 53620-01-2 for ; Thu, 9 Jul 2009 21:32:24 -0300 (ADT) Received: from cvs.postgresql.org (cvs.postgresql.org [217.196.146.206]) by mail.postgresql.org (Postfix) with ESMTP id 192FB63432D for ; Thu, 9 Jul 2009 21:32:25 -0300 (ADT) Received: by cvs.postgresql.org (Postfix, from userid 1007) id 8809B75331E; Fri, 10 Jul 2009 00:32:23 +0000 (UTC) MIME-Version: 1.0 To: pgsql-committers@postgresql.org Subject: pgsql: Fix xslt_process() to ensure that it inserts a NULL terminator X-Mailer: activitymail 1.24, http://search.cpan.org/dist/activitymail/ Content-Type: text/plain Message-Id: <20090710003223.8809B75331E@cvs.postgresql.org> Date: Fri, 10 Jul 2009 00:32:23 +0000 (UTC) From: tgl@postgresql.org (Tom Lane) X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0 tagged_above=0 required=5 tests=none X-Spam-Level: X-Archive-Number: 200907/108 X-Sequence-Number: 37711 Log Message: ----------- Fix xslt_process() to ensure that it inserts a NULL terminator after the last pair of parameter name/value strings, even when there are MAXPARAMS of them. Aboriginal bug in contrib/xml2, noted while studying bug #4912 (though I'm not sure whether there's something else involved in that report). This might be thought a security issue, since it's a potential backend crash; but considering that untrustworthy users shouldn't be allowed to get their hands on xslt_process() anyway, it's probably not worth getting excited about. Tags: ---- REL8_1_STABLE Modified Files: -------------- pgsql/contrib/xml2: xslt_proc.c (r1.4 -> r1.4.2.1) (http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/contrib/xml2/xslt_proc.c?r1=1.4&r2=1.4.2.1)