diff options
| author | Tom Lane <tgl@sss.pgh.pa.us> | 2006-02-12 22:33:29 +0000 |
|---|---|---|
| committer | Tom Lane <tgl@sss.pgh.pa.us> | 2006-02-12 22:33:29 +0000 |
| commit | 7ef174c032117d433e114779e4e33024c6d365cc (patch) | |
| tree | cf1437027d6150cfa32b63caacad559fb9c03108 /src/backend/utils/mb/encnames.c | |
| parent | 86b2da894af2ff266947e6fc5d18d621e0d9119f (diff) | |
Fix bug in SET SESSION AUTHORIZATION that allows unprivileged users to crash
the server, if it has been compiled with Asserts enabled (CVE-2006-0553).
Thanks to Akio Ishida for reporting this problem.
Diffstat (limited to 'src/backend/utils/mb/encnames.c')
| -rw-r--r-- | src/backend/utils/mb/encnames.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/backend/utils/mb/encnames.c b/src/backend/utils/mb/encnames.c index 86b3bfa6cbc..a114ff6e26a 100644 --- a/src/backend/utils/mb/encnames.c +++ b/src/backend/utils/mb/encnames.c @@ -2,7 +2,7 @@ * Encoding names and routines for work with it. All * in this file is shared bedween FE and BE. * - * $Id: encnames.c,v 1.17 2003/07/25 20:17:55 tgl Exp $ + * $Id: encnames.c,v 1.17.4.1 2006/02/12 22:33:28 tgl Exp $ */ #ifdef FRONTEND #include "postgres_fe.h" @@ -434,7 +434,7 @@ pg_char_to_encname_struct(const char *name) if (name == NULL || *name == '\0') return NULL; - if (strlen(name) > NAMEDATALEN) + if (strlen(name) >= NAMEDATALEN) { #ifdef FRONTEND fprintf(stderr, "encoding name too long\n"); |