Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t5UgU-006Sag-3J for pgsql-committers@arkaria.postgresql.org; Mon, 28 Oct 2024 18:41:46 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1t5UgS-0094Tl-94 for pgsql-committers@arkaria.postgresql.org; Mon, 28 Oct 2024 18:41:44 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t5Ue2-0091PJ-Ee for pgsql-committers@lists.postgresql.org; Mon, 28 Oct 2024 18:39:14 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t5Udz-003JTz-4p for pgsql-committers@lists.postgresql.org; Mon, 28 Oct 2024 18:39:13 +0000 Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t5Udx-00AF16-NA for pgsql-committers@lists.postgresql.org; Mon, 28 Oct 2024 18:39:10 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1t5Udy-002snM-9f for pgsql-committers@lists.postgresql.org; Mon, 28 Oct 2024 18:39:09 +0000 Content-Type: multipart/mixed; boundary="===============7132584276141291710==" MIME-Version: 1.0 From: Tom Lane To: pgsql-committers@lists.postgresql.org Subject: pgsql: Guard against enormously long input in pg_saslprep(). X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Mon, 28 Oct 2024 18:39:09 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============7132584276141291710== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 R3VhcmQgYWdhaW5zdCBlbm9ybW91c2x5IGxvbmcgaW5wdXQgaW4gcGdfc2FzbHByZXAoKS4KCkNv dmVyaXR5IGNvbXBsYWluZWQgdGhhdCBwZ19zYXNscHJlcCgpIGNvdWxkIHN1ZmZlciBpbnRlZ2Vy IG92ZXJmbG93LApsZWFkaW5nIHRvIHVuZGVyLWFsbG9jYXRpb24gb2YgdGhlIG91dHB1dCBidWZm ZXIsIGlmIHRoZSBpbnB1dCBzdHJpbmcKZXhjZWVkcyBTSVpFX01BWC80LiAgVGhpcyBoYXphcmQg c2VlbXMgbGFyZ2VseSBoeXBvdGhldGljYWwsIGJ1dCBpdCdzCmVhc3kgZW5vdWdoIHRvIGRlZmVu ZCBhZ2FpbnN0LCBzbyBsZXQncyBkbyBzby4KClRoaXMgcGF0Y2ggY3JlYXRlcyBhIHRoaXJkIHBs YWNlIGluIHNyYy9jb21tb24vIHdoZXJlIHdlIGFyZSBsb2NhbGx5CmRlZmluaW5nIE1heEFsbG9j U2l6ZSBzbyB0aGF0IHdlIGNhbiB0ZXN0IGFnYWluc3QgdGhhdCBpbiB0aGUgc2FtZSB3YXkKaW4g YmFja2VuZCBhbmQgZnJvbnRlbmQgY29tcGlsZXMuICBUaGF0IHNlZW1zIGxpa2UgYWJvdXQgdHdv IHBsYWNlcwp0b28gbWFueSwgc28gdGhlIG5leHQgcGF0Y2ggd2lsbCBtb3ZlIHRoYXQgaW50byBj b21tb24vZmVfbWVtdXRpbHMuaC4KSSdtIGhlc2l0YW50IHRvIGRvIHRoYXQgaW4gYmFjayBicmFu Y2hlcyBob3dldmVyLgoKQmFjay1wYXRjaCB0byB2MTQuICBUaGUgY29kZSBsb29rcyBzaW1pbGFy IGluIG9sZGVyIGJyYW5jaGVzLCBidXQKYmVmb3JlIGNvbW1pdCA2N2E0NzJkNzEgdGhlcmUgd2Fz IGEgc2VwYXJhdGUgdGVzdCBvbiB0aGUgaW5wdXQgc3RyaW5nCmxlbmd0aCB0aGF0IHByZXZlbnRl ZCB0aGlzIGhhemFyZC4KClBlciBDb3Zlcml0eSByZXBvcnQuCgpCcmFuY2gKLS0tLS0tCm1hc3Rl cgoKRGV0YWlscwotLS0tLS0tCmh0dHBzOi8vZ2l0LnBvc3RncmVzcWwub3JnL3BnL2NvbW1pdGRp ZmYvYmQyODQzMTY3MjAwZjI2MDc5NzJjMGRlZmI5MTZkYWE3OWNhMjY1ZgoKTW9kaWZpZWQgRmls ZXMKLS0tLS0tLS0tLS0tLS0Kc3JjL2NvbW1vbi9zYXNscHJlcC5jIHwgNyArKysrKysrCjEgZmls ZSBjaGFuZ2VkLCA3IGluc2VydGlvbnMoKykKCg== --===============7132584276141291710==--