Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t5UgT-006Sag-Sb for pgsql-committers@arkaria.postgresql.org; Mon, 28 Oct 2024 18:41:45 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1t5UgS-0094Tp-98 for pgsql-committers@arkaria.postgresql.org; Mon, 28 Oct 2024 18:41:44 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t5Ue3-0091VJ-8J for pgsql-committers@lists.postgresql.org; Mon, 28 Oct 2024 18:39:15 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t5Udz-003JU1-5b for pgsql-committers@lists.postgresql.org; Mon, 28 Oct 2024 18:39:14 +0000 Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1t5Udx-00AF1A-SN for pgsql-committers@lists.postgresql.org; Mon, 28 Oct 2024 18:39:10 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1t5Udy-002snW-DZ for pgsql-committers@lists.postgresql.org; Mon, 28 Oct 2024 18:39:09 +0000 Content-Type: multipart/mixed; boundary="===============7335017848592717318==" MIME-Version: 1.0 From: Tom Lane To: pgsql-committers@lists.postgresql.org Subject: pgsql: Guard against enormously long input in pg_saslprep(). X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Mon, 28 Oct 2024 18:39:09 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============7335017848592717318== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 R3VhcmQgYWdhaW5zdCBlbm9ybW91c2x5IGxvbmcgaW5wdXQgaW4gcGdfc2FzbHByZXAoKS4KCkNv dmVyaXR5IGNvbXBsYWluZWQgdGhhdCBwZ19zYXNscHJlcCgpIGNvdWxkIHN1ZmZlciBpbnRlZ2Vy IG92ZXJmbG93LApsZWFkaW5nIHRvIHVuZGVyLWFsbG9jYXRpb24gb2YgdGhlIG91dHB1dCBidWZm ZXIsIGlmIHRoZSBpbnB1dCBzdHJpbmcKZXhjZWVkcyBTSVpFX01BWC80LiAgVGhpcyBoYXphcmQg c2VlbXMgbGFyZ2VseSBoeXBvdGhldGljYWwsIGJ1dCBpdCdzCmVhc3kgZW5vdWdoIHRvIGRlZmVu ZCBhZ2FpbnN0LCBzbyBsZXQncyBkbyBzby4KClRoaXMgcGF0Y2ggY3JlYXRlcyBhIHRoaXJkIHBs YWNlIGluIHNyYy9jb21tb24vIHdoZXJlIHdlIGFyZSBsb2NhbGx5CmRlZmluaW5nIE1heEFsbG9j U2l6ZSBzbyB0aGF0IHdlIGNhbiB0ZXN0IGFnYWluc3QgdGhhdCBpbiB0aGUgc2FtZSB3YXkKaW4g YmFja2VuZCBhbmQgZnJvbnRlbmQgY29tcGlsZXMuICBUaGF0IHNlZW1zIGxpa2UgYWJvdXQgdHdv IHBsYWNlcwp0b28gbWFueSwgc28gdGhlIG5leHQgcGF0Y2ggd2lsbCBtb3ZlIHRoYXQgaW50byBj b21tb24vZmVfbWVtdXRpbHMuaC4KSSdtIGhlc2l0YW50IHRvIGRvIHRoYXQgaW4gYmFjayBicmFu Y2hlcyBob3dldmVyLgoKQmFjay1wYXRjaCB0byB2MTQuICBUaGUgY29kZSBsb29rcyBzaW1pbGFy IGluIG9sZGVyIGJyYW5jaGVzLCBidXQKYmVmb3JlIGNvbW1pdCA2N2E0NzJkNzEgdGhlcmUgd2Fz IGEgc2VwYXJhdGUgdGVzdCBvbiB0aGUgaW5wdXQgc3RyaW5nCmxlbmd0aCB0aGF0IHByZXZlbnRl ZCB0aGlzIGhhemFyZC4KClBlciBDb3Zlcml0eSByZXBvcnQuCgpCcmFuY2gKLS0tLS0tClJFTF8x NV9TVEFCTEUKCkRldGFpbHMKLS0tLS0tLQpodHRwczovL2dpdC5wb3N0Z3Jlc3FsLm9yZy9wZy9j b21taXRkaWZmL2RmZmY2ODdmM2MyNWZkMTE0YTdhYjdkMjJkZjY0NTcxNmE5ODEzOWYKCk1vZGlm aWVkIEZpbGVzCi0tLS0tLS0tLS0tLS0tCnNyYy9jb21tb24vc2FzbHByZXAuYyB8IDcgKysrKysr KwoxIGZpbGUgY2hhbmdlZCwgNyBpbnNlcnRpb25zKCspCgo= --===============7335017848592717318==--