• Peter Eisentraut's avatar
    Avoid potential buffer overflow crash · 4053189d
    Peter Eisentraut authored
    A pointer to a C string was treated as a pointer to a "name" datum and
    passed to SPI_execute_plan().  This pointer would then end up being
    passed through datumCopy(), which would try to copy the entire 64 bytes
    of name data, thus running past the end of the C string.  Fix by
    converting the string to a proper name structure.
    
    Found by LLVM AddressSanitizer.
    4053189d
ruleutils.c 248 KB