Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wuX7q-000ldg-1S for pgsql-committers@arkaria.postgresql.org; Thu, 13 Aug 2026 15:13:46 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1wuX7k-00E4aQ-2k for pgsql-committers@arkaria.postgresql.org; Thu, 13 Aug 2026 15:13:41 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wtQG7-00HQra-04 for pgsql-committers@lists.postgresql.org; Mon, 10 Aug 2026 13:41:42 +0000 Received: from mahout.postgresql.org ([72.32.157.227]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1wtQFs-00000001M3n-05Wn for pgsql-committers@lists.postgresql.org; Mon, 10 Aug 2026 13:41:42 +0000 Received: from gemulon.postgresql.org ([2001:4800:3e1:1::198]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wtQFp-00218V-25 for pgsql-committers@lists.postgresql.org; Mon, 10 Aug 2026 13:41:25 +0000 Received: from localhost ([127.0.0.1] helo=gemulon.postgresql.org) by gemulon.postgresql.org with esmtp (Exim 4.98.2) (envelope-from ) id 1wtQFn-00000000y7R-3oeP for pgsql-committers@lists.postgresql.org; Mon, 10 Aug 2026 13:41:23 +0000 Content-Type: multipart/mixed; boundary="===============2488441745459134291==" MIME-Version: 1.0 From: Noah Misch To: pgsql-committers@lists.postgresql.org Subject: pgsql: Fix potential buffer overrun in regexp match/split functions. X-Auto-Response-Suppress: All Auto-Submitted: auto-generated Message-Id: Date: Mon, 10 Aug 2026 13:41:23 +0000 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============2488441745459134291== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Rml4IHBvdGVudGlhbCBidWZmZXIgb3ZlcnJ1biBpbiByZWdleHAgbWF0Y2gvc3BsaXQgZnVuY3Rp b25zLgoKc2V0dXBfcmVnZXhwX21hdGNoZXMoKSBzaXplcyB0aGUgYnVmZmVyIHVzZWQgdG8gY29u dmVydCBtYXRjaGVkCnN1YnN0cmluZ3MgYmFjayBmcm9tIHBnX3djaGFyIGZvcm0gYXQgdGhlIHNt YWxsZXIgb2YgbWF4bGVuKmVtbCBhbmQKdGhlIG9yaWdpbmFsIHN0cmluZydzIGJ5dGUgbGVuZ3Ro LCBvbiB0aGUgYXNzdW1wdGlvbiB0aGF0IHN1Y2ggYQpjb252ZXJzaW9uIGNhbm5vdCBwcm9kdWNl IG1vcmUgYnl0ZXMgdGhhbiB0aGUgc3RyaW5nIGl0IGNhbWUKZnJvbS4gVGhhdCBhc3N1bXB0aW9u IGhvbGRzIG9ubHkgZm9yIHZhbGlkbHkgZW5jb2RlZCBpbnB1dC4gQnV0CnBnX21iMndjaGFyX3dp dGhfbGVuKCkgc2lsZW50bHkgYWNjZXB0cyBieXRlcyB0aGF0IGFyZSBpbnZhbGlkIGluIHRoZQpk YXRhYmFzZSBlbmNvZGluZywgdHVybmluZyBlYWNoIHN1Y2ggYnl0ZSBpbnRvIG9uZSBwZ193Y2hh ciwgYW5kCmNvbnZlcnRpbmcgdGhhdCBiYWNrIGNhbiB0YWtlIG1vcmUgYnl0ZXMgdGhhbiB0aGUg aW5wdXQgZGlkLiBBIHN0cmluZwptYWRlIG9mIHN1Y2ggYnl0ZXMgdGhlcmVmb3JlIG92ZXJydW5z IHRoZSBjb252ZXJzaW9uIGJ1ZmZlciBieSB1cCB0bwppdHMgb3duIGxlbmd0aCwgY29ycnVwdGlu ZyB0aGUgZm9sbG93aW5nIG1lbW9yeS4gcmVnZXhwX21hdGNoKCksCnJlZ2V4cF9tYXRjaGVzKCks IHJlZ2V4cF9zcGxpdF90b190YWJsZSgpIGFuZCByZWdleHBfc3BsaXRfdG9fYXJyYXkoKQphcmUg YWxsIGFmZmVjdGVkLgoKRml4IGJ5IGRyb3BwaW5nIHRoZSB0aWdodGVyIGJvdW5kIGFuZCBhbHdh eXMgYWxsb2NhdGluZyBtYXhsZW4qZW1sICsgMQpieXRlcy4KClJlcG9ydGVkLWJ5OiBGcmFuY2Vz Y28gVmVyYXJkaSA8ZnJldmFkaXNjb3I4OUBnbWFpbC5jb20+CkF1dGhvcjogTWFzYWhpa28gU2F3 YWRhIDxzYXdhZGEubXNoa0BnbWFpbC5jb20+ClJldmlld2VkLWJ5OiBUb20gTGFuZSA8dGdsQHNz cy5wZ2gucGEudXM+CkJhY2twYXRjaC10aHJvdWdoOiAxNApTZWN1cml0eTogQ1ZFLTIwMjYtMTQ2 NjQKCkJyYW5jaAotLS0tLS0KUkVMXzE4X1NUQUJMRQoKRGV0YWlscwotLS0tLS0tCmh0dHBzOi8v Z2l0LnBvc3RncmVzcWwub3JnL3BnL2NvbW1pdGRpZmYvYjdlNWMzZjYzNDY0MjExZjA1NWQyMWY0 ZjUxOTZhZmE1OTA1YWY4ZgpBdXRob3I6IE1hc2FoaWtvIFNhd2FkYSA8bXNhd2FkYUBwb3N0Z3Jl c3FsLm9yZz4KCk1vZGlmaWVkIEZpbGVzCi0tLS0tLS0tLS0tLS0tCnNyYy9iYWNrZW5kL3V0aWxz L2FkdC9yZWdleHAuYyB8IDI1ICsrKysrKysrKysrKystLS0tLS0tLS0tLS0KMSBmaWxlIGNoYW5n ZWQsIDEzIGluc2VydGlvbnMoKyksIDEyIGRlbGV0aW9ucygtKQoK --===============2488441745459134291==--