Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1voSJM-004sal-0r for pgsql-committers@arkaria.postgresql.org; Fri, 06 Feb 2026 20:20:16 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1voSJL-005MSc-1I for pgsql-committers@arkaria.postgresql.org; Fri, 06 Feb 2026 20:20:15 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1voSJL-005MSS-0R for pgsql-committers@lists.postgresql.org; Fri, 06 Feb 2026 20:20:14 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1voSJI-00000000tRd-1LSm for pgsql-committers@lists.postgresql.org; Fri, 06 Feb 2026 20:20:14 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Date:Message-Id:Subject:To:From:MIME-Version: Content-Type:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description:In-Reply-To:References; bh=WT1wwGt5vqwNGjbwrED28Cu/kOL33YhgomTXOrHZTtE=; b=Vgsi9HX/DkYXb+6uvh0tAlK0Y7 J0Pe7YjSQ2nyRp3T5L51GZN+RjRoijhk0sTCC100o8wjR1grHAdZE2Q9Ph0No5tptrPsBzF67VdQt xjU/IjnGaflwe8sWmv9eTM0OkIp5vWn2PutjTzCTwxaAMdZximAEFArFmLfW8QyTF7D6rNTZp/66g H4uRqLw3lhIoAEyobQh3y8T/R4ylFXnZ7Sbhfdai0UA2Je5+lIFqW0/kem8HYEbI10K8EA96++GXd ZkMeTd5Vwn4nHRDifhCJc/Y6M7q2siYgGkBxwSsjY7EqDIv7YlDVFyEAjygzxulRXI0XGyTl23SAT K7W/qjNw==; Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1voSJH-0041Hi-1V for pgsql-committers@lists.postgresql.org; Fri, 06 Feb 2026 20:20:11 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1voSJG-001Xg9-2o for pgsql-committers@lists.postgresql.org; Fri, 06 Feb 2026 20:20:11 +0000 Content-Type: multipart/mixed; boundary="===============8789384250157393596==" MIME-Version: 1.0 From: Jacob Champion To: pgsql-committers@lists.postgresql.org Subject: pgsql: Protect against small overread in SASLprep validation X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Fri, 06 Feb 2026 20:20:11 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============8789384250157393596== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 UHJvdGVjdCBhZ2FpbnN0IHNtYWxsIG92ZXJyZWFkIGluIFNBU0xwcmVwIHZhbGlkYXRpb24KCihU aGlzIGlzIGEgY2hlcnJ5LXBpY2sgb2YgMzkwYjNjYmJiLCB3aGljaCBJIGhhZG4ndCByZWFsaXpl ZCB3YXNuJ3QKYmFja3BhdGNoZWQuIEl0IHdhcyBvcmlnaW5hbGx5IHJlcG9ydGVkIHRvIHNlY3Vy aXR5QCBhbmQgZGV0ZXJtaW5lZCBub3QKdG8gYmUgYSB2dWxuZXJhYmlsaXR5OyB0aGFua3MgdG8g U3RhbmlzbGF2IE9zaXBvdiBmb3Igbm90aWNpbmcgdGhlCm9taXNzaW9uIGluIHRoZSBiYWNrIGJy YW5jaGVzLikKCkluIGNhc2Ugb2YgdG9ybiBVVEY4IGluIHRoZSBpbnB1dCBkYXRhIHdlIG1pZ2h0 IGVuZCB1cCBnb2luZwpwYXN0IHRoZSBlbmQgb2YgdGhlIHN0cmluZyBzaW5jZSB3ZSBkb24ndCBh Y2NvdW50IGZvciBsZW5ndGguCldoaWxlIHZhbGlkYXRpb24gd29uJ3QgYmUgcGVyZm9ybWVkIG9u IGEgc2VxdWVuY2Ugd2l0aCBhIE5VTEwKYnl0ZSBpdCdzIGJldHRlciB0byBhdm9pZCBnb2luZyBw YXN0IHRoZSBlbmQgdG8gYmVnaW5nIHdpdGguCkZpeCBieSB0YWtpbmcgdGhlIGxlbmd0aCBpbnRv IGNvbnNpZGVyYXRpb24uCgpSZXBvcnRlZC1ieTogU3RhbmlzbGF2IE9zaXBvdiA8c3Rhc29zMjRA Z21haWwuY29tPgpSZXZpZXdlZC1ieTogRGFuaWVsIEd1c3RhZnNzb24gPGRhbmllbEB5ZXNxbC5z ZT4KRGlzY3Vzc2lvbjogaHR0cHM6Ly9wb3N0Z3IuZXMvbS9DQU9ZbWkrbVRubU0xNzJnPV8rWXZj NDdoenplQXNZUHkyQzRVQlkzSEs5cC1BWE5WMGdAbWFpbC5nbWFpbC5jb20KQmFja3BhdGNoLXRo cm91Z2g6IDE0CgpCcmFuY2gKLS0tLS0tClJFTF8xNF9TVEFCTEUKCkRldGFpbHMKLS0tLS0tLQpo dHRwczovL2dpdC5wb3N0Z3Jlc3FsLm9yZy9wZy9jb21taXRkaWZmLzNiYjMzOWZhMmM5ZjJiZjA5 ODA1MTcwZmUwODY3ZDgzYjU2MmEzMjQKCk1vZGlmaWVkIEZpbGVzCi0tLS0tLS0tLS0tLS0tCnNy Yy9jb21tb24vc2FzbHByZXAuYyB8IDYgKysrKy0tCjEgZmlsZSBjaGFuZ2VkLCA0IGluc2VydGlv bnMoKyksIDIgZGVsZXRpb25zKC0pCgo= --===============8789384250157393596==--