Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t5Ue3-006SEe-Kk for pgsql-committers@arkaria.postgresql.org; Mon, 28 Oct 2024 18:39:15 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1t5Ue2-0091PT-0c for pgsql-committers@arkaria.postgresql.org; Mon, 28 Oct 2024 18:39:14 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t5Ue1-0091PI-PQ for pgsql-committers@lists.postgresql.org; Mon, 28 Oct 2024 18:39:14 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t5Udz-003JU0-5N for pgsql-committers@lists.postgresql.org; Mon, 28 Oct 2024 18:39:12 +0000 Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t5Udx-00AF18-NF for pgsql-committers@lists.postgresql.org; Mon, 28 Oct 2024 18:39:10 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1t5Udy-002snQ-BX for pgsql-committers@lists.postgresql.org; Mon, 28 Oct 2024 18:39:09 +0000 Content-Type: multipart/mixed; boundary="===============0563974027187695010==" MIME-Version: 1.0 From: Tom Lane To: pgsql-committers@lists.postgresql.org Subject: pgsql: Guard against enormously long input in pg_saslprep(). X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Mon, 28 Oct 2024 18:39:09 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============0563974027187695010== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 R3VhcmQgYWdhaW5zdCBlbm9ybW91c2x5IGxvbmcgaW5wdXQgaW4gcGdfc2FzbHByZXAoKS4KCkNv dmVyaXR5IGNvbXBsYWluZWQgdGhhdCBwZ19zYXNscHJlcCgpIGNvdWxkIHN1ZmZlciBpbnRlZ2Vy IG92ZXJmbG93LApsZWFkaW5nIHRvIHVuZGVyLWFsbG9jYXRpb24gb2YgdGhlIG91dHB1dCBidWZm ZXIsIGlmIHRoZSBpbnB1dCBzdHJpbmcKZXhjZWVkcyBTSVpFX01BWC80LiAgVGhpcyBoYXphcmQg c2VlbXMgbGFyZ2VseSBoeXBvdGhldGljYWwsIGJ1dCBpdCdzCmVhc3kgZW5vdWdoIHRvIGRlZmVu ZCBhZ2FpbnN0LCBzbyBsZXQncyBkbyBzby4KClRoaXMgcGF0Y2ggY3JlYXRlcyBhIHRoaXJkIHBs YWNlIGluIHNyYy9jb21tb24vIHdoZXJlIHdlIGFyZSBsb2NhbGx5CmRlZmluaW5nIE1heEFsbG9j U2l6ZSBzbyB0aGF0IHdlIGNhbiB0ZXN0IGFnYWluc3QgdGhhdCBpbiB0aGUgc2FtZSB3YXkKaW4g YmFja2VuZCBhbmQgZnJvbnRlbmQgY29tcGlsZXMuICBUaGF0IHNlZW1zIGxpa2UgYWJvdXQgdHdv IHBsYWNlcwp0b28gbWFueSwgc28gdGhlIG5leHQgcGF0Y2ggd2lsbCBtb3ZlIHRoYXQgaW50byBj b21tb24vZmVfbWVtdXRpbHMuaC4KSSdtIGhlc2l0YW50IHRvIGRvIHRoYXQgaW4gYmFjayBicmFu Y2hlcyBob3dldmVyLgoKQmFjay1wYXRjaCB0byB2MTQuICBUaGUgY29kZSBsb29rcyBzaW1pbGFy IGluIG9sZGVyIGJyYW5jaGVzLCBidXQKYmVmb3JlIGNvbW1pdCA2N2E0NzJkNzEgdGhlcmUgd2Fz IGEgc2VwYXJhdGUgdGVzdCBvbiB0aGUgaW5wdXQgc3RyaW5nCmxlbmd0aCB0aGF0IHByZXZlbnRl ZCB0aGlzIGhhemFyZC4KClBlciBDb3Zlcml0eSByZXBvcnQuCgpCcmFuY2gKLS0tLS0tClJFTF8x N19TVEFCTEUKCkRldGFpbHMKLS0tLS0tLQpodHRwczovL2dpdC5wb3N0Z3Jlc3FsLm9yZy9wZy9j b21taXRkaWZmL2U2MzFlZDg5YzJlNTg0NjRkMzk2OWJhZGYyZDVkMDY1NDExYjkzZjAKCk1vZGlm aWVkIEZpbGVzCi0tLS0tLS0tLS0tLS0tCnNyYy9jb21tb24vc2FzbHByZXAuYyB8IDcgKysrKysr KwoxIGZpbGUgY2hhbmdlZCwgNyBpbnNlcnRpb25zKCspCgo= --===============0563974027187695010==--