diff options
| author | Michael Paquier <michael@paquier.xyz> | 2024-02-19 11:38:44 +0900 |
|---|---|---|
| committer | Michael Paquier <michael@paquier.xyz> | 2024-02-19 11:38:44 +0900 |
| commit | 88e03d055d18c5f54f81589d13edc76945f0875c (patch) | |
| tree | 3b0e451a5d30787034fe583e21415eab73deb30e /src/interfaces/ecpg/compatlib | |
| parent | 2c7f2eb0c8aa8b2163cc41c1666c71de4267f80c (diff) | |
ecpg: Fix zero-termination of string generated by intoasc()
intoasc(), a wrapper for PGTYPESinterval_to_asc that converts an
interval to its textual representation, used a plain memcpy() when
copying its result. This could miss a zero-termination in the result
string, leading to an incorrect result.
The routines in informix.c do not provide the length of their result
buffer, which would allow a replacement of strcpy() to safer strlcpy()
calls, but this requires an ABI breakage and that cannot happen in
back-branches.
Author: Oleg Tselebrovskiy
Reviewed-by: Ashutosh Bapat
Discussion: https://postgr.es/m/bf47888585149f83b276861a1662f7e4@postgrespro.ru
Backpatch-through: 12
Diffstat (limited to 'src/interfaces/ecpg/compatlib')
| -rw-r--r-- | src/interfaces/ecpg/compatlib/informix.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/interfaces/ecpg/compatlib/informix.c b/src/interfaces/ecpg/compatlib/informix.c index dccf39582da..80d40aa3e09 100644 --- a/src/interfaces/ecpg/compatlib/informix.c +++ b/src/interfaces/ecpg/compatlib/informix.c @@ -654,7 +654,7 @@ intoasc(interval * i, char *str) if (!tmp) return -errno; - memcpy(str, tmp, strlen(tmp)); + strcpy(str, tmp); free(tmp); return 0; } |