Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t3OPw-00CJRx-Iv for pgsql-committers@arkaria.postgresql.org; Tue, 22 Oct 2024 23:36:00 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1t3OPs-004Cmb-RE for pgsql-committers@arkaria.postgresql.org; Tue, 22 Oct 2024 23:35:57 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t3OPs-004CmN-JX for pgsql-committers@lists.postgresql.org; Tue, 22 Oct 2024 23:35:56 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t3OPp-002MVY-KV for pgsql-committers@lists.postgresql.org; Tue, 22 Oct 2024 23:35:55 +0000 Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t3OPn-0075cW-JB for pgsql-committers@lists.postgresql.org; Tue, 22 Oct 2024 23:35:52 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1t3OPn-001ySg-OX for pgsql-committers@lists.postgresql.org; Tue, 22 Oct 2024 23:35:51 +0000 Content-Type: multipart/mixed; boundary="===============8565100987886087055==" MIME-Version: 1.0 From: Michael Paquier To: pgsql-committers@lists.postgresql.org Subject: pgsql: ecpg: Fix out-of-bound read in DecodeDateTime() X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Tue, 22 Oct 2024 23:35:51 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============8565100987886087055== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 ZWNwZzogRml4IG91dC1vZi1ib3VuZCByZWFkIGluIERlY29kZURhdGVUaW1lKCkKCkl0IHdhcyBw b3NzaWJsZSBmb3IgdGhlIGNvZGUgdG8gcmVhZCBvdXQtb2YtYm91bmQgZGF0YSBmcm9tIHRoZQoi ZGF5X3RhYiIgdGFibGUgd2l0aCBzb21lIGNyYWZ0ZWQgaW5wdXQgZGF0YS4gIExldCdzIHRyZWF0 IHRoZXNlIGFzCmludmFsaWQgaW5wdXQgYXMgdGhlIG1vbnRoIG51bWJlciBpcyBpbmNvcnJlY3Qu CgpBIHRlc3QgaXMgYWRkZWQgdG8gdGVzdCB0aGlzIGNhc2Ugd2l0aCBhIGNoZWNrIG9uIHRoZSBl cnJubyByZXR1cm5lZCBieQp0aGUgZGVjb2Rpbmcgcm91dGluZS4gIEEgdGVzdCBjbG9zZSB0byB0 aGUgbmV3IG9uZSBhZGRlZCBpbiB0aGlzIGNvbW1pdAp3YXMgdGVzdGluZyBmb3IgYSBmYWlsdXJl LCBidXQgZGlkIG5vdCBsb29rIGF0IHRoZSBlcnJubyBnZW5lcmF0ZWQsIHNvCmxldCdzIHVzZSB0 aGlzIGNvbW1pdCB0byBhbHNvIGNoYW5nZSBpdCwgYWRkaW5nIGEgY2hlY2sgb24gdGhlIGVycm5v CnJldHVybmVkIGJ5IERlY29kZURhdGVUaW1lKCkuCgpMaWtlIHRoZSBvdGhlciB0ZXN0IHNjcmlw dHMsIGR0X3Rlc3Qgc2hvdWxkIGxpa2VseSBiZSBleHBhbmRlZCB0bwppbmNsdWRlIG1vcmUgY2hl Y2tzIGJhc2VkIG9uIHRoZSBlcnJub3MgZ2VuZXJhdGVkIGluIHRoZXNlIGNvZGUgcGF0aHMuClRo aXMgaXMgbGVmdCBhcyBmdXR1cmUgd29yay4KClRoaXMgaXNzdWUgZXhpc3RzIHNpbmNlIDJlNmY5 NzU2MGE4Mywgc28gYmFja3BhdGNoIGFsbCB0aGUgd2F5IGRvd24uCgpSZXBvcnRlZC1ieTogUGF2 ZWwgTmVrcmFzb3YKQXV0aG9yOiBCcnVjZSBNb21qaWFuLCBQYXZlbCBOZWtyYXNvdgpEaXNjdXNz aW9uOiBodHRwczovL3Bvc3Rnci5lcy9tLzE4NjE0LTZiYmUwMDExNzM1MjMwOWVAcG9zdGdyZXNx bC5vcmcKQmFja3BhdGNoLXRocm91Z2g6IDEyCgpCcmFuY2gKLS0tLS0tCm1hc3RlcgoKRGV0YWls cwotLS0tLS0tCmh0dHBzOi8vZ2l0LnBvc3RncmVzcWwub3JnL3BnL2NvbW1pdGRpZmYvYTBiZmYz OGQxMzNhYzk1ZmI1NmJiZDg2OGExMjhiYmE5NWVjNDZjOQoKTW9kaWZpZWQgRmlsZXMKLS0tLS0t LS0tLS0tLS0Kc3JjL2ludGVyZmFjZXMvZWNwZy9wZ3R5cGVzbGliL2R0X2NvbW1vbi5jICAgICAg ICAgfCAgNiArLQouLi4vZWNwZy90ZXN0L2V4cGVjdGVkL3BndHlwZXNsaWItZHRfdGVzdC5jICAg ICAgICB8IDc2ICsrKysrKysrKysrKysrKy0tLS0tLS0KLi4uL2VjcGcvdGVzdC9leHBlY3RlZC9w Z3R5cGVzbGliLWR0X3Rlc3Quc3RkZXJyICAgfCA0MiArKysrKystLS0tLS0KLi4uL2VjcGcvdGVz dC9leHBlY3RlZC9wZ3R5cGVzbGliLWR0X3Rlc3Quc3Rkb3V0ICAgfCAgMyArLQpzcmMvaW50ZXJm YWNlcy9lY3BnL3Rlc3QvcGd0eXBlc2xpYi9kdF90ZXN0LnBnYyAgICB8IDMwICsrKysrKysrKwo1 IGZpbGVzIGNoYW5nZWQsIDEwOSBpbnNlcnRpb25zKCspLCA0OCBkZWxldGlvbnMoLSkKCg== --===============8565100987886087055==--