Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1voSJy-004t0u-0o for pgsql-committers@arkaria.postgresql.org; Fri, 06 Feb 2026 20:20:54 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1voSJx-005O6E-1H for pgsql-committers@arkaria.postgresql.org; Fri, 06 Feb 2026 20:20:53 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1voSJL-005MU4-2d for pgsql-committers@lists.postgresql.org; Fri, 06 Feb 2026 20:20:15 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1voSJJ-00000001Q5l-01jO for pgsql-committers@lists.postgresql.org; Fri, 06 Feb 2026 20:20:15 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Date:Message-Id:Subject:To:From:MIME-Version: Content-Type:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:In-Reply-To:References; bh=+O90ly0ujhfSm5mWP0LB0B7qdWT+TqQdW2nBSfFZuZc=; b=w4uaFztJYRznw6yV/NprK5Flp6 QEpQrHvtuSaHTDmBjGo99zL9JL1xfrZqXUVX8sAuMgokIucwzWsO8a3u22l+jcSlv/TSDkD+G1V88 Z32nevXkIQLfA+QREpIqq6c2b4ZdxswQp0fZer6GJgi0f6DLrNYVcckNaW/1JcmIlCCCo6F2qikug EainrVqgVN8wN5He8jbHoUObP909flzJxtflc8XFBC+UJQrD8+12GHloQ6IBjZ8wXymNUcIj+V32z aXJBOCcs9RpKo9nz25mJNwObLfCO4MlqLOyCHC5zfPribcxsqNqLPokDAJlVCxtAK8YtHhR9w5zTo oOnTkecw==; Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1voSJH-0041Hh-1V for pgsql-committers@lists.postgresql.org; Fri, 06 Feb 2026 20:20:11 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1voSJG-001Xg5-2h for pgsql-committers@lists.postgresql.org; Fri, 06 Feb 2026 20:20:11 +0000 Content-Type: multipart/mixed; boundary="===============8442690770822871122==" MIME-Version: 1.0 From: Jacob Champion To: pgsql-committers@lists.postgresql.org Subject: pgsql: Protect against small overread in SASLprep validation X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Fri, 06 Feb 2026 20:20:11 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============8442690770822871122== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 UHJvdGVjdCBhZ2FpbnN0IHNtYWxsIG92ZXJyZWFkIGluIFNBU0xwcmVwIHZhbGlkYXRpb24KCihU aGlzIGlzIGEgY2hlcnJ5LXBpY2sgb2YgMzkwYjNjYmJiLCB3aGljaCBJIGhhZG4ndCByZWFsaXpl ZCB3YXNuJ3QKYmFja3BhdGNoZWQuIEl0IHdhcyBvcmlnaW5hbGx5IHJlcG9ydGVkIHRvIHNlY3Vy aXR5QCBhbmQgZGV0ZXJtaW5lZCBub3QKdG8gYmUgYSB2dWxuZXJhYmlsaXR5OyB0aGFua3MgdG8g U3RhbmlzbGF2IE9zaXBvdiBmb3Igbm90aWNpbmcgdGhlCm9taXNzaW9uIGluIHRoZSBiYWNrIGJy YW5jaGVzLikKCkluIGNhc2Ugb2YgdG9ybiBVVEY4IGluIHRoZSBpbnB1dCBkYXRhIHdlIG1pZ2h0 IGVuZCB1cCBnb2luZwpwYXN0IHRoZSBlbmQgb2YgdGhlIHN0cmluZyBzaW5jZSB3ZSBkb24ndCBh Y2NvdW50IGZvciBsZW5ndGguCldoaWxlIHZhbGlkYXRpb24gd29uJ3QgYmUgcGVyZm9ybWVkIG9u IGEgc2VxdWVuY2Ugd2l0aCBhIE5VTEwKYnl0ZSBpdCdzIGJldHRlciB0byBhdm9pZCBnb2luZyBw YXN0IHRoZSBlbmQgdG8gYmVnaW5nIHdpdGguCkZpeCBieSB0YWtpbmcgdGhlIGxlbmd0aCBpbnRv IGNvbnNpZGVyYXRpb24uCgpSZXBvcnRlZC1ieTogU3RhbmlzbGF2IE9zaXBvdiA8c3Rhc29zMjRA Z21haWwuY29tPgpSZXZpZXdlZC1ieTogRGFuaWVsIEd1c3RhZnNzb24gPGRhbmllbEB5ZXNxbC5z ZT4KRGlzY3Vzc2lvbjogaHR0cHM6Ly9wb3N0Z3IuZXMvbS9DQU9ZbWkrbVRubU0xNzJnPV8rWXZj NDdoenplQXNZUHkyQzRVQlkzSEs5cC1BWE5WMGdAbWFpbC5nbWFpbC5jb20KQmFja3BhdGNoLXRo cm91Z2g6IDE0CgpCcmFuY2gKLS0tLS0tClJFTF8xNl9TVEFCTEUKCkRldGFpbHMKLS0tLS0tLQpo dHRwczovL2dpdC5wb3N0Z3Jlc3FsLm9yZy9wZy9jb21taXRkaWZmLzQ2YWFlYzRjMGU2ZDkwZTlm MDc0OTgyZmViNDNlZmQ0YjNjNDJhNzgKCk1vZGlmaWVkIEZpbGVzCi0tLS0tLS0tLS0tLS0tCnNy Yy9jb21tb24vc2FzbHByZXAuYyB8IDYgKysrKy0tCjEgZmlsZSBjaGFuZ2VkLCA0IGluc2VydGlv bnMoKyksIDIgZGVsZXRpb25zKC0pCgo= --===============8442690770822871122==--