to_char(): prevent accesses beyond the allocated buffer
authorBruce Momjian
Mon, 2 Feb 2015 15:00:44 +0000 (10:00 -0500)
committerBruce Momjian
Mon, 2 Feb 2015 15:00:49 +0000 (10:00 -0500)
commit1628a0bbfa2e30cd52daaa3ae78961d301adad2f
treec3f60163366d32652ca6f199dca0230da3af6ea4
parente87dedc0c492a4dcc45ec4e424027a1180d7ebb6
to_char():  prevent accesses beyond the allocated buffer

Previously very long field masks for floats could access memory
beyond the existing buffer allocated to hold the result.

Reported by Andres Freund and Peter Geoghegan. Backpatch to all
supported versions.

Security: CVE-2015-0241
src/backend/utils/adt/formatting.c