• Bruce Momjian's avatar
    port/snprintf(): fix overflow and do padding · 29725b3d
    Bruce Momjian authored
    Prevent port/snprintf() from overflowing its local fixed-size
    buffer and pad to the desired number of digits with zeros, even
    if the precision is beyond the ability of the native sprintf().
    port/snprintf() is only used on systems that lack a native
    snprintf().
    
    Reported by Bruce Momjian. Patch by Tom Lane.	Backpatch to all
    supported versions.
    
    Security: CVE-2015-0242
    29725b3d
snprintf.c 24.5 KB