mirror of
https://github.com/postgres/postgres.git
synced 2026-03-14 06:32:18 -04:00
e58f042d9a
All known standard library implementations of these functions can fail with ENOMEM. A caller neglecting to check for failure would experience missing output, information exposure, or a crash. Check return values within wrappers and code, currently just snprintf.c, that bypasses the wrappers. The wrappers do not return after an error, so their callers need not check. Back-patch to 9.0 (all supported versions). Popular free software standard library implementations do take pains to bypass malloc() in simple cases, but they risk ENOMEM for floating point numbers, positional arguments, large field widths, and large precisions. No specification demands such caution, so this commit regards every call to a printf family function as a potential threat. Injecting the wrappers implicitly is a compromise between patch scope and design goals. I would prefer to edit each call site to name a wrapper explicitly. libpq and the ECPG libraries would, ideally, convey errors to the caller rather than abort(). All that would be painfully invasive for a back-patched security fix, hence this compromise. Security: CVE-2015-3166
61 lines
1.6 KiB
Makefile
61 lines
1.6 KiB
Makefile
#-------------------------------------------------------------------------
|
|
#
|
|
# Makefile for ecpg compatibility library
|
|
#
|
|
# Portions Copyright (c) 1996-2011, PostgreSQL Global Development Group
|
|
# Portions Copyright (c) 1994, Regents of the University of California
|
|
#
|
|
# src/interfaces/ecpg/compatlib/Makefile
|
|
#
|
|
#-------------------------------------------------------------------------
|
|
|
|
subdir = src/interfaces/ecpg/compatlib
|
|
top_builddir = ../../../..
|
|
include $(top_builddir)/src/Makefile.global
|
|
|
|
NAME= ecpg_compat
|
|
SO_MAJOR_VERSION= 3
|
|
SO_MINOR_VERSION= 3
|
|
|
|
override CPPFLAGS := -I../include -I$(top_srcdir)/src/interfaces/ecpg/include \
|
|
-I$(libpq_srcdir) -I$(top_srcdir)/src/include/utils -DFRONTEND $(CPPFLAGS)
|
|
override CFLAGS += $(PTHREAD_CFLAGS)
|
|
|
|
SHLIB_LINK = -L../ecpglib -lecpg -L../pgtypeslib -lpgtypes $(libpq) \
|
|
$(filter -lintl -lm, $(LIBS)) $(PTHREAD_LIBS)
|
|
SHLIB_PREREQS = submake-ecpglib submake-pgtypeslib
|
|
|
|
SHLIB_EXPORTS = exports.txt
|
|
|
|
# Need to recompile any libpgport object files
|
|
LIBS := $(filter-out -lpgport, $(LIBS))
|
|
|
|
OBJS= informix.o $(filter snprintf.o, $(LIBOBJS))
|
|
|
|
all: all-lib
|
|
|
|
.PHONY: submake-ecpglib submake-pgtypeslib
|
|
|
|
submake-ecpglib:
|
|
$(MAKE) -C $(top_builddir)/src/interfaces/ecpg/ecpglib all
|
|
|
|
submake-pgtypeslib:
|
|
$(MAKE) -C $(top_builddir)/src/interfaces/ecpg/pgtypeslib all
|
|
|
|
# Shared library stuff
|
|
include $(top_srcdir)/src/Makefile.shlib
|
|
|
|
# XXX This library uses no symbols from snprintf.c.
|
|
snprintf.c: % : $(top_srcdir)/src/port/%
|
|
rm -f $@ && $(LN_S) $< .
|
|
|
|
install: all installdirs install-lib
|
|
|
|
installdirs: installdirs-lib
|
|
|
|
uninstall: uninstall-lib
|
|
|
|
clean distclean: clean-lib
|
|
rm -f $(OBJS) snprintf.c
|
|
|
|
maintainer-clean: distclean maintainer-clean-lib
|