Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <pgsql-committers-owner+archive@lists.postgresql.org>)
	id 1voSJy-004t0s-0o
	for pgsql-committers@arkaria.postgresql.org;
	Fri, 06 Feb 2026 20:20:54 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.96)
	(envelope-from <pgsql-committers-owner+archive@lists.postgresql.org>)
	id 1voSJx-005O6A-1G
	for pgsql-committers@arkaria.postgresql.org;
	Fri, 06 Feb 2026 20:20:53 +0000
Received: from makus.postgresql.org ([2001:4800:3e1:1::229])
	by malur.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <jchampion@postgresql.org>)
	id 1voSJL-005MSU-37
	for pgsql-committers@lists.postgresql.org;
	Fri, 06 Feb 2026 20:20:15 +0000
Received: from mahout.postgresql.org ([2001:4800:3e1:1::227])
	by makus.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.2)
	(envelope-from <jchampion@postgresql.org>)
	id 1voSJI-00000000tRc-1QkI
	for pgsql-committers@lists.postgresql.org;
	Fri, 06 Feb 2026 20:20:14 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=postgresql.org; s=20171124; h=Date:Message-Id:Subject:To:From:MIME-Version:
	Content-Type:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:In-Reply-To:References;
	bh=C2MEQL8tFYvfMGSlGtJXZ2cIJKDRx1yGAZvlByPKXEs=; b=06hBQkTzi9RNpAjkdvJ7j3CnV9
	WTzN/gv9vhsVrwGL9IFs3wXIx4pS+LhnfRPL/vAC9VEwmji4lfkitEMYcgoZJIaIdWng57JwxpmBi
	2GNuQuZ3WU/axYxM75UglARUyKtZV+bEgw7Psm3t0Ff9Kv69INXieuB3i385rDcB51oiRUY8t68ws
	pi26V6M41EsxxlqtgcKpVhDQkSJKK2Jdj3BY9YT8U1kd0FupqAsB5ZbnK0wBMtL4GWDEOwU2Jvx0h
	7JqFPItrjemWV1dKx/JFSpAe/eMOWCfqUx6vLetDtBNk8ozYNj40sB4ew7u6LBGAcAW1iR7V21JdU
	87IgiiyA==;
Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198])
	by mahout.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <jchampion@postgresql.org>)
	id 1voSJH-0041Hg-1V
	for pgsql-committers@lists.postgresql.org;
	Fri, 06 Feb 2026 20:20:11 +0000
Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org)
	by gemulon.postgresql.org with esmtp (Exim 4.96)
	(envelope-from <jchampion@postgresql.org>)
	id 1voSJG-001Xg3-2Y
	for pgsql-committers@lists.postgresql.org;
	Fri, 06 Feb 2026 20:20:11 +0000
Content-Type: multipart/mixed; boundary="===============0319793845994507163=="
MIME-Version: 1.0
From: Jacob Champion <jchampion@postgresql.org>
To: pgsql-committers@lists.postgresql.org
Subject: pgsql: Protect against small overread in SASLprep validation
X-Auto-Response-Suppress: All
Auto-Submitted: auto-generated
Message-Id: <E1voSJG-001Xg3-2Y@gemulon.postgresql.org>
Date: Fri, 06 Feb 2026 20:20:11 +0000
List-Id: <pgsql-committers.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-committers@lists.postgresql.org>
List-Owner: <mailto:pgsql-committers-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-committers>
Archived-At: 
 <https://www.postgresql.org/message-id/E1voSJG-001Xg3-2Y%40gemulon.postgresql.org>
Precedence: bulk

--===============0319793845994507163==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
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--===============0319793845994507163==--