Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wFa3G-005KAx-1a for pgsql-committers@arkaria.postgresql.org; Wed, 22 Apr 2026 16:03:46 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1wFa3F-00EIwr-1T for pgsql-committers@arkaria.postgresql.org; Wed, 22 Apr 2026 16:03:45 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wFa28-00EH7s-14 for pgsql-committers@lists.postgresql.org; Wed, 22 Apr 2026 16:02:36 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1wFa1y-00000002H6g-2eCQ for pgsql-committers@lists.postgresql.org; Wed, 22 Apr 2026 16:02:35 +0000 Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wFa1x-006u9P-33 for pgsql-committers@lists.postgresql.org; Wed, 22 Apr 2026 16:02:26 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1wFa1w-002BOt-1f for pgsql-committers@lists.postgresql.org; Wed, 22 Apr 2026 16:02:25 +0000 Content-Type: multipart/mixed; boundary="===============3191587643391723806==" MIME-Version: 1.0 From: Tom Lane To: pgsql-committers@lists.postgresql.org Subject: pgsql: Prevent some buffer overruns in spell.c's parsing of affix files X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Wed, 22 Apr 2026 16:02:25 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============3191587643391723806== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 UHJldmVudCBzb21lIGJ1ZmZlciBvdmVycnVucyBpbiBzcGVsbC5jJ3MgcGFyc2luZyBvZiBhZmZp eCBmaWxlcy4KCnBhcnNlX2FmZmVudHJ5KCkgYW5kIGFkZENvbXBvdW5kQWZmaXhGbGFnVmFsdWUo KSBlYWNoIGNvbGxlY3QgZmllbGRzCmZyb20gYW4gYWZmaXggZmlsZSBpbnRvIHdvcmtpbmcgYnVm ZmVycyBvZiBzaXplIEJVRlNJWi4gIFRoZXkgZmFpbGVkCnRvIGRlZmVuZCBhZ2FpbnN0IG92ZXJs ZW5ndGggZmllbGRzLCBzbyB0aGF0IGEgbWFsaWNpb3VzIGFmZml4IGZpbGUKY291bGQgY2F1c2Ug YSBzdGFjayBzbWFzaC4gIEJVRlNJWiAodHlwaWNhbGx5IDhLKSBpcyBjZXJ0YWlubHkgd2F5Cmxv bmdlciB0aGFuIGFueSByZWFzb25hYmxlIGFmZml4IGZpZWxkLCBidXQgbGV0J3MgZml4IHRoaXMg d2hpbGUKd2UncmUgY2xvc2luZyBob2xlcyBpbiB0aGlzIGFyZWEuCgpJIGNob3NlIHRvIGRvIHRo aXMgYnkgc2lsZW50bHkgdHJ1bmNhdGluZyB0aGUgaW5wdXQgYmVmb3JlIGl0IGNhbgpvdmVycnVu IHRoZSBidWZmZXIsIHVzaW5nIGxvZ2ljIGNvbXBhcmFibGUgdG8gdGhlIGV4aXN0aW5nIGxvZ2lj IGluCmdldF9uZXh0ZmllbGQoKS4gIENlcnRhaW5seSB0aGVyZSdzIGF0IGxlYXN0IGFzIGdvb2Qg YW4gYXJndW1lbnQgZm9yCnJhaXNpbmcgYW4gZXJyb3IsIGJ1dCBmb3Igbm93IGxldCdzIGZvbGxv dyB0aGUgZXhpc3RpbmcgcHJlY2VkZW50LgoKUmVwb3J0ZWQtYnk6IElnb3IgU3RlcGFuc2t5IDxp Z29yLnN0ZXBhbnNreUBvcmNhLnNlY3VyaXR5PgpBdXRob3I6IFRvbSBMYW5lIDx0Z2xAc3NzLnBn aC5wYS51cz4KUmV2aWV3ZWQtYnk6IEFuZHJleSBCb3JvZGluIDx4NG1tbUB5YW5kZXgtdGVhbS5y dT4KRGlzY3Vzc2lvbjogaHR0cHM6Ly9wb3N0Z3IuZXMvbS84NjQxMjMuMTc3NjgxMDkwOUBzc3Mu cGdoLnBhLnVzCkJhY2twYXRjaC10aHJvdWdoOiAxNAoKQnJhbmNoCi0tLS0tLQptYXN0ZXIKCkRl dGFpbHMKLS0tLS0tLQpodHRwczovL2dpdC5wb3N0Z3Jlc3FsLm9yZy9wZy9jb21taXRkaWZmL2Q3 OTcwZTdlOTUxYmIzOWIwZDVkN2FlNjMzZmM3ZjFhZjU0YWE5MzIKCk1vZGlmaWVkIEZpbGVzCi0t LS0tLS0tLS0tLS0tCnNyYy9iYWNrZW5kL3RzZWFyY2gvc3BlbGwuYyB8IDM0ICsrKysrKysrKysr KysrKysrKysrKysrKy0tLS0tLS0tLS0KMSBmaWxlIGNoYW5nZWQsIDI0IGluc2VydGlvbnMoKyks IDEwIGRlbGV0aW9ucygtKQoK --===============3191587643391723806==--