postgresql/src/test
Noah Misch 16d58b5b53 Prevent stack overflow in json-related functions.
Sufficiently-deep recursion heretofore elicited a SIGSEGV.  If an
application constructs PostgreSQL json or jsonb values from arbitrary
user input, application users could have exploited this to terminate all
active database connections.  That applies to 9.3, where the json parser
adopted recursive descent, and later versions.  Only row_to_json() and
array_to_json() were at risk in 9.2, both in a non-security capacity.
Back-patch to 9.2, where the json type was introduced.

Oskari Saarenmaa, reviewed by Michael Paquier.

Security: CVE-2015-5289
2015-10-05 10:06:34 -04:00
..
examples Update copyright for 2014 2014-01-07 16:05:30 -05:00
isolation Fix portability issue in isolationtester grammar. 2015-05-27 19:14:55 -04:00
locale Rename 'gmake' to 'make' in docs and recommended commands 2014-02-12 17:29:19 -05:00
mb Lots of doc corrections. 2012-04-23 22:43:09 -04:00
performance Run newly-configured perltidy script on Perl files. 2012-07-04 21:47:49 -04:00
perl Make tap tests store postmaster logs and handle vpaths correctly 2015-07-28 16:04:54 -04:00
regress Prevent stack overflow in json-related functions. 2015-10-05 10:06:34 -04:00
thread Update copyright for 2014 2014-01-07 16:05:30 -05:00
Makefile Add isolation test to check-world and installcheck-world 2012-03-05 20:19:20 +02:00