Avoid potential buffer overflow crash A pointer to a C string was treated as a pointer to a "name" datum and passed to SPI_execute_plan(). This pointer would then end up being passed through datumCopy(), which would try to copy the entire 64 bytes of name data, thus running past the end of the C string. Fix by converting the string to a proper name structure.
Found by LLVM AddressSanitizer. Branch ------ REL9_3_STABLE Details ------- http://git.postgresql.org/pg/commitdiff/0f8ff3e467b2b52e8c0c44b01a1f9a4495949ba1 Modified Files -------------- src/backend/utils/adt/ruleutils.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) -- Sent via pgsql-committers mailing list ([email protected]) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-committers
