Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t3ORq-00CJcv-FV for pgsql-committers@arkaria.postgresql.org; Tue, 22 Oct 2024 23:37:58 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1t3ORo-004GOu-EO for pgsql-committers@arkaria.postgresql.org; Tue, 22 Oct 2024 23:37:56 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t3OPu-004D6c-NN for pgsql-committers@lists.postgresql.org; Tue, 22 Oct 2024 23:35:59 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t3OPq-002T4D-GJ for pgsql-committers@lists.postgresql.org; Tue, 22 Oct 2024 23:35:58 +0000 Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t3OPn-0075cZ-Je for pgsql-committers@lists.postgresql.org; Tue, 22 Oct 2024 23:35:52 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1t3OPn-001ySn-QP for pgsql-committers@lists.postgresql.org; Tue, 22 Oct 2024 23:35:51 +0000 Content-Type: multipart/mixed; boundary="===============3192167000131806199==" MIME-Version: 1.0 From: Michael Paquier To: pgsql-committers@lists.postgresql.org Subject: pgsql: ecpg: Fix out-of-bound read in DecodeDateTime() X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Tue, 22 Oct 2024 23:35:51 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============3192167000131806199== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 ZWNwZzogRml4IG91dC1vZi1ib3VuZCByZWFkIGluIERlY29kZURhdGVUaW1lKCkKCkl0IHdhcyBw b3NzaWJsZSBmb3IgdGhlIGNvZGUgdG8gcmVhZCBvdXQtb2YtYm91bmQgZGF0YSBmcm9tIHRoZQoi ZGF5X3RhYiIgdGFibGUgd2l0aCBzb21lIGNyYWZ0ZWQgaW5wdXQgZGF0YS4gIExldCdzIHRyZWF0 IHRoZXNlIGFzCmludmFsaWQgaW5wdXQgYXMgdGhlIG1vbnRoIG51bWJlciBpcyBpbmNvcnJlY3Qu CgpBIHRlc3QgaXMgYWRkZWQgdG8gdGVzdCB0aGlzIGNhc2Ugd2l0aCBhIGNoZWNrIG9uIHRoZSBl cnJubyByZXR1cm5lZCBieQp0aGUgZGVjb2Rpbmcgcm91dGluZS4gIEEgdGVzdCBjbG9zZSB0byB0 aGUgbmV3IG9uZSBhZGRlZCBpbiB0aGlzIGNvbW1pdAp3YXMgdGVzdGluZyBmb3IgYSBmYWlsdXJl LCBidXQgZGlkIG5vdCBsb29rIGF0IHRoZSBlcnJubyBnZW5lcmF0ZWQsIHNvCmxldCdzIHVzZSB0 aGlzIGNvbW1pdCB0byBhbHNvIGNoYW5nZSBpdCwgYWRkaW5nIGEgY2hlY2sgb24gdGhlIGVycm5v CnJldHVybmVkIGJ5IERlY29kZURhdGVUaW1lKCkuCgpMaWtlIHRoZSBvdGhlciB0ZXN0IHNjcmlw dHMsIGR0X3Rlc3Qgc2hvdWxkIGxpa2VseSBiZSBleHBhbmRlZCB0bwppbmNsdWRlIG1vcmUgY2hl Y2tzIGJhc2VkIG9uIHRoZSBlcnJub3MgZ2VuZXJhdGVkIGluIHRoZXNlIGNvZGUgcGF0aHMuClRo aXMgaXMgbGVmdCBhcyBmdXR1cmUgd29yay4KClRoaXMgaXNzdWUgZXhpc3RzIHNpbmNlIDJlNmY5 NzU2MGE4Mywgc28gYmFja3BhdGNoIGFsbCB0aGUgd2F5IGRvd24uCgpSZXBvcnRlZC1ieTogUGF2 ZWwgTmVrcmFzb3YKQXV0aG9yOiBCcnVjZSBNb21qaWFuLCBQYXZlbCBOZWtyYXNvdgpEaXNjdXNz aW9uOiBodHRwczovL3Bvc3Rnci5lcy9tLzE4NjE0LTZiYmUwMDExNzM1MjMwOWVAcG9zdGdyZXNx bC5vcmcKQmFja3BhdGNoLXRocm91Z2g6IDEyCgpCcmFuY2gKLS0tLS0tClJFTF8xNV9TVEFCTEUK CkRldGFpbHMKLS0tLS0tLQpodHRwczovL2dpdC5wb3N0Z3Jlc3FsLm9yZy9wZy9jb21taXRkaWZm LzMzNTUwMWZiMmI4MDA3MDAwZDhjMTU0NjI4MDY1MzU1YjVjZDQzNjYKCk1vZGlmaWVkIEZpbGVz Ci0tLS0tLS0tLS0tLS0tCnNyYy9pbnRlcmZhY2VzL2VjcGcvcGd0eXBlc2xpYi9kdF9jb21tb24u YyAgICAgICAgIHwgIDYgKy0KLi4uL2VjcGcvdGVzdC9leHBlY3RlZC9wZ3R5cGVzbGliLWR0X3Rl c3QuYyAgICAgICAgfCA3NiArKysrKysrKysrKysrKystLS0tLS0tCi4uLi9lY3BnL3Rlc3QvZXhw ZWN0ZWQvcGd0eXBlc2xpYi1kdF90ZXN0LnN0ZGVyciAgIHwgNDIgKysrKysrLS0tLS0tCi4uLi9l Y3BnL3Rlc3QvZXhwZWN0ZWQvcGd0eXBlc2xpYi1kdF90ZXN0LnN0ZG91dCAgIHwgIDMgKy0Kc3Jj L2ludGVyZmFjZXMvZWNwZy90ZXN0L3BndHlwZXNsaWIvZHRfdGVzdC5wZ2MgICAgfCAzMCArKysr KysrKysKNSBmaWxlcyBjaGFuZ2VkLCAxMDkgaW5zZXJ0aW9ucygrKSwgNDggZGVsZXRpb25zKC0p Cgo= --===============3192167000131806199==--