Re: Found a buffer-overflow defect in asynchronous database connection API PQconnectPoll

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Found a buffer-overflow defect in asynchronous database connection API PQconnectPoll
Дата
Msg-id 2249065.1624464160@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: Found a buffer-overflow defect in asynchronous database connection API PQconnectPoll  (Sudheer H R <sudheer.hr@tekenlight.com>)
Ответы Re: Found a buffer-overflow defect in asynchronous database connection API PQconnectPoll
Список pgsql-bugs
Sudheer H R <sudheer.hr@tekenlight.com> writes:
> Built with —with-gssapi and the problem occurs again.

Hmph.  I can't reproduce this on RHEL8: so far as I can tell, the string
is physically null-terminated, and clang's address sanitizer doesn't
complain either.  Still, given the vagueness of the spec for
gss_display_status, it seems wise to not assume that every GSS
implementation acts the same.

            regards, tom lane



В списке pgsql-bugs по дате отправления: