Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wFa36-005KAi-1G for pgsql-committers@arkaria.postgresql.org; Wed, 22 Apr 2026 16:03:36 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1wFa24-00EGSJ-0X for pgsql-committers@arkaria.postgresql.org; Wed, 22 Apr 2026 16:02:32 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wFa23-00EGS9-34 for pgsql-committers@lists.postgresql.org; Wed, 22 Apr 2026 16:02:31 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1wFa1y-00000002H6c-0PsT for pgsql-committers@lists.postgresql.org; Wed, 22 Apr 2026 16:02:30 +0000 Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wFa1x-006u9T-0q for pgsql-committers@lists.postgresql.org; Wed, 22 Apr 2026 16:02:25 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1wFa1w-002BP2-1v for pgsql-committers@lists.postgresql.org; Wed, 22 Apr 2026 16:02:25 +0000 Content-Type: multipart/mixed; boundary="===============9165828841003241878==" MIME-Version: 1.0 From: Tom Lane To: pgsql-committers@lists.postgresql.org Subject: pgsql: Prevent some buffer overruns in spell.c's parsing of affix files X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Wed, 22 Apr 2026 16:02:25 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============9165828841003241878== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 UHJldmVudCBzb21lIGJ1ZmZlciBvdmVycnVucyBpbiBzcGVsbC5jJ3MgcGFyc2luZyBvZiBhZmZp eCBmaWxlcy4KCnBhcnNlX2FmZmVudHJ5KCkgYW5kIGFkZENvbXBvdW5kQWZmaXhGbGFnVmFsdWUo KSBlYWNoIGNvbGxlY3QgZmllbGRzCmZyb20gYW4gYWZmaXggZmlsZSBpbnRvIHdvcmtpbmcgYnVm ZmVycyBvZiBzaXplIEJVRlNJWi4gIFRoZXkgZmFpbGVkCnRvIGRlZmVuZCBhZ2FpbnN0IG92ZXJs ZW5ndGggZmllbGRzLCBzbyB0aGF0IGEgbWFsaWNpb3VzIGFmZml4IGZpbGUKY291bGQgY2F1c2Ug YSBzdGFjayBzbWFzaC4gIEJVRlNJWiAodHlwaWNhbGx5IDhLKSBpcyBjZXJ0YWlubHkgd2F5Cmxv bmdlciB0aGFuIGFueSByZWFzb25hYmxlIGFmZml4IGZpZWxkLCBidXQgbGV0J3MgZml4IHRoaXMg d2hpbGUKd2UncmUgY2xvc2luZyBob2xlcyBpbiB0aGlzIGFyZWEuCgpJIGNob3NlIHRvIGRvIHRo aXMgYnkgc2lsZW50bHkgdHJ1bmNhdGluZyB0aGUgaW5wdXQgYmVmb3JlIGl0IGNhbgpvdmVycnVu IHRoZSBidWZmZXIsIHVzaW5nIGxvZ2ljIGNvbXBhcmFibGUgdG8gdGhlIGV4aXN0aW5nIGxvZ2lj IGluCmdldF9uZXh0ZmllbGQoKS4gIENlcnRhaW5seSB0aGVyZSdzIGF0IGxlYXN0IGFzIGdvb2Qg YW4gYXJndW1lbnQgZm9yCnJhaXNpbmcgYW4gZXJyb3IsIGJ1dCBmb3Igbm93IGxldCdzIGZvbGxv dyB0aGUgZXhpc3RpbmcgcHJlY2VkZW50LgoKUmVwb3J0ZWQtYnk6IElnb3IgU3RlcGFuc2t5IDxp Z29yLnN0ZXBhbnNreUBvcmNhLnNlY3VyaXR5PgpBdXRob3I6IFRvbSBMYW5lIDx0Z2xAc3NzLnBn aC5wYS51cz4KUmV2aWV3ZWQtYnk6IEFuZHJleSBCb3JvZGluIDx4NG1tbUB5YW5kZXgtdGVhbS5y dT4KRGlzY3Vzc2lvbjogaHR0cHM6Ly9wb3N0Z3IuZXMvbS84NjQxMjMuMTc3NjgxMDkwOUBzc3Mu cGdoLnBhLnVzCkJhY2twYXRjaC10aHJvdWdoOiAxNAoKQnJhbmNoCi0tLS0tLQpSRUxfMTVfU1RB QkxFCgpEZXRhaWxzCi0tLS0tLS0KaHR0cHM6Ly9naXQucG9zdGdyZXNxbC5vcmcvcGcvY29tbWl0 ZGlmZi8wYjE5NmQzZGI3MTM4OTY3ZDEzNWI3MmVkOTI5NmE5YWQ3YzA2ODQ2CgpNb2RpZmllZCBG aWxlcwotLS0tLS0tLS0tLS0tLQpzcmMvYmFja2VuZC90c2VhcmNoL3NwZWxsLmMgfCAzNCArKysr KysrKysrKysrKysrKysrKysrKystLS0tLS0tLS0tCjEgZmlsZSBjaGFuZ2VkLCAyNCBpbnNlcnRp b25zKCspLCAxMCBkZWxldGlvbnMoLSkKCg== --===============9165828841003241878==--