upstream/postgresql
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2026-02-15 08:37:56 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
postgresql/src/include
History
Noah Misch 4318daecc9 Fix handling of wide datetime input/output. 
Many server functions use the MAXDATELEN constant to size a buffer for
parsing or displaying a datetime value.  It was much too small for the
longest possible interval output and slightly too small for certain
valid timestamp input, particularly input with a long timezone name.
The long input was rejected needlessly; the long output caused
interval_out() to overrun its buffer.  ECPG's pgtypes library has a copy
of the vulnerable functions, which bore the same vulnerabilities along
with some of its own.  In contrast to the server, certain long inputs
caused stack overflow rather than failing cleanly.  Back-patch to 8.4
(all supported versions).

Reported by Daniel Schüssler, reviewed by Tom Lane.

Security: CVE-2014-0063
2014-02-17 09:33:31 -05:00
..
access Speed up "rare & frequent" type GIN queries. 2014-02-07 15:22:48 +02:00
bootstrap Update copyright for 2014 2014-01-07 16:05:30 -05:00
catalog Avoid repeated name lookups during table and index DDL. 2014-02-17 09:33:31 -05:00
commands Avoid repeated name lookups during table and index DDL. 2014-02-17 09:33:31 -05:00
common Make various variables const (read-only). 2014-01-18 16:04:32 -05:00
datatype Update copyright for 2014 2014-01-07 16:05:30 -05:00
executor Update copyright for 2014 2014-01-07 16:05:30 -05:00
foreign Update copyright for 2014 2014-01-07 16:05:30 -05:00
lib Update copyright for 2014 2014-01-07 16:05:30 -05:00
libpq Log a detail message for auth failures due to missing or expired password. 2014-01-27 21:04:09 -05:00
mb Fix typo 2014-02-13 21:50:43 -05:00
nodes Avoid repeated name lookups during table and index DDL. 2014-02-17 09:33:31 -05:00
optimizer Code review for auto-tuned effective_cache_size. 2014-01-27 00:05:56 -05:00
parser Avoid repeated name lookups during table and index DDL. 2014-02-17 09:33:31 -05:00
port Enable building with Visual Studion 2013. 2014-01-26 09:49:10 -05:00
portability Update copyright for 2014 2014-01-07 16:05:30 -05:00
postmaster Separate multixact freezing parameters from xid's 2014-02-13 19:36:31 -03:00
regex Update copyright for 2014 2014-01-07 16:05:30 -05:00
replication Introduce replication slots. 2014-01-31 22:45:36 -05:00
rewrite Update copyright for 2014 2014-01-07 16:05:30 -05:00
snowball Update copyright for 2014 2014-01-07 16:05:30 -05:00
storage PGDLLIMPORT-ify MainLWLockArray, ProcDiePending, proc_exit_inprogress. 2014-02-16 20:12:43 -05:00
tcop Avoid repeated name lookups during table and index DDL. 2014-02-17 09:33:31 -05:00
tsearch Update copyright for 2014 2014-01-07 16:05:30 -05:00
utils Fix handling of wide datetime input/output. 2014-02-17 09:33:31 -05:00
.gitignore Autoconfiscate selection of 64-bit int type for 64-bit large object API. 2012-10-07 21:52:43 -04:00
c.h Prevent double macro definition of WIN32. 2014-01-17 11:49:44 -05:00
fmgr.h Prevent privilege escalation in explicit calls to PL validators. 2014-02-17 09:33:31 -05:00
funcapi.h Update copyright for 2014 2014-01-07 16:05:30 -05:00
getaddrinfo.h Update copyright for 2014 2014-01-07 16:05:30 -05:00
getopt_long.h Centralize getopt-related declarations in a new header file pg_getopt.h. 2014-02-15 14:31:30 -05:00
Makefile Remove maintainer-check target, fold into normal build 2013-10-10 20:11:56 -04:00
miscadmin.h PGDLLIMPORT-ify MainLWLockArray, ProcDiePending, proc_exit_inprogress. 2014-02-16 20:12:43 -05:00
pg_config.h.in Allow use of "z" flag in our printf calls, and use it where appropriate. 2014-01-23 17:18:33 -05:00
pg_config.h.win32 Enable building with Visual Studion 2013. 2014-01-26 09:49:10 -05:00
pg_config_ext.h.in Autoconfiscate selection of 64-bit int type for 64-bit large object API. 2012-10-07 21:52:43 -04:00
pg_config_ext.h.win32 Autoconfiscate selection of 64-bit int type for 64-bit large object API. 2012-10-07 21:52:43 -04:00
pg_config_manual.h Fix typos in comments for ALTER SYSTEM. 2014-01-27 12:23:20 +09:00
pg_getopt.h Centralize getopt-related declarations in a new header file pg_getopt.h. 2014-02-15 14:31:30 -05:00
pg_trace.h Update copyright for 2014 2014-01-07 16:05:30 -05:00
pgstat.h Make pg_basebackup skip temporary statistics files. 2014-02-03 23:19:49 +09:00
pgtar.h Update copyright for 2014 2014-01-07 16:05:30 -05:00
pgtime.h Update copyright for 2014 2014-01-07 16:05:30 -05:00
port.h Centralize getopt-related declarations in a new header file pg_getopt.h. 2014-02-15 14:31:30 -05:00
postgres.h Update copyright for 2014 2014-01-07 16:05:30 -05:00
postgres_ext.h Provide database object names as separate fields in error messages. 2013-01-29 17:08:26 -05:00
postgres_fe.h Update copyright for 2014 2014-01-07 16:05:30 -05:00
rusagestub.h Update copyright for 2014 2014-01-07 16:05:30 -05:00
windowapi.h Update copyright for 2014 2014-01-07 16:05:30 -05:00