← Back to branch summary

~ubuntu-branches/ubuntu/precise/postgresql-8.4/precise-security

~ubuntu-branches/ubuntu/precise/postgresql-8.4/precise-security

« back to all changes in this revision

Viewing changes to src/bin/psql/psqlscan.c

Committer: Package Import Robot
Author(s): Martin Pitt
Date: 2013-02-05 16:27:57 UTC
mfrom: (1.3.10) (28.1.4 precise-proposed)
Revision ID: package-import@ubuntu.com-20130205162757-6meeudvz3rd4zxqr

Tags: 8.4.16-0ubuntu12.04

https://launchpad.net/bugs/1116336

* New upstream security/bug fix release: (LP: #1116336)
  - Prevent execution of enum_recv from SQL
    The function was misdeclared, allowing a simple SQL command to crash the
    server.  In principle an attacker might be able to use it to examine the
    contents of server memory.  Our thanks to Sumit Soni (via Secunia SVCRP)
    for reporting this issue. (CVE-2013-0255)
  - See HISTORY/changelog.gz for the other bug fixes.

files added:
src/backend/po/it.po

src/backend/po/ru.po

src/backend/regex/regprefix.c

src/bin/pg_controldata/po/ru.po

src/bin/pg_dump/po/ru.po

src/bin/psql/po/ru.po

src/bin/scripts/po/ru.po

src/interfaces/ecpg/ecpglib/po/ru.po

src/interfaces/ecpg/preproc/po/ru.po

src/pl/plperl/po/ru.po

src/pl/plpgsql/src/po/ru.po

src/pl/plpython/po/ru.po

src/pl/tcl/po/ru.po

files modified:
COPYRIGHT

HISTORY

INSTALL

configure

configure.in

contrib/dblink/dblink.c

contrib/dblink/expected/dblink.out

contrib/pageinspect/btreefuncs.c

contrib/pgcrypto/crypt-des.c

contrib/xml2/expected/xml2.out

contrib/xml2/expected/xml2_1.out

contrib/xml2/sql/xml2.sql

contrib/xml2/xslt_proc.c

debian/changelog

debian/control

debian/postgresql-8.4.preinst

doc/bug.template

doc/man.tar.gz

doc/postgres.tar.gz

doc/src/sgml/backup.sgml

doc/src/sgml/config.sgml

doc/src/sgml/ddl.sgml

doc/src/sgml/docguide.sgml

doc/src/sgml/external-projects.sgml

doc/src/sgml/func.sgml

doc/src/sgml/installation.sgml

doc/src/sgml/legal.sgml

doc/src/sgml/maintenance.sgml

doc/src/sgml/nls.sgml

doc/src/sgml/queries.sgml

doc/src/sgml/ref/alter_table.sgml

doc/src/sgml/ref/create_database.sgml

doc/src/sgml/ref/create_index.sgml

doc/src/sgml/ref/create_schema.sgml

doc/src/sgml/ref/delete.sgml

doc/src/sgml/ref/drop_owned.sgml

doc/src/sgml/ref/initdb.sgml

doc/src/sgml/ref/lock.sgml

doc/src/sgml/ref/select.sgml

doc/src/sgml/ref/truncate.sgml

doc/src/sgml/ref/update.sgml

doc/src/sgml/release-8.3.sgml

doc/src/sgml/release-8.4.sgml

doc/src/sgml/runtime.sgml

doc/src/sgml/trigger.sgml

doc/src/sgml/xml2.sgml

src/backend/Makefile

src/backend/access/gin/ginxlog.c

src/backend/access/gist/gistutil.c

src/backend/access/heap/README.HOT

src/backend/access/heap/heapam.c

src/backend/access/index/genam.c

src/backend/access/nbtree/README

src/backend/access/nbtree/nbtpage.c

src/backend/access/transam/xact.c

src/backend/access/transam/xlog.c

src/backend/catalog/index.c

src/backend/catalog/pg_shdepend.c

src/backend/catalog/storage.c

src/backend/commands/cluster.c

src/backend/commands/copy.c

src/backend/commands/dbcommands.c

src/backend/commands/indexcmds.c

src/backend/commands/sequence.c

src/backend/commands/tablecmds.c

src/backend/commands/trigger.c

src/backend/commands/vacuum.c

src/backend/commands/vacuumlazy.c

src/backend/executor/execMain.c

src/backend/executor/execQual.c

src/backend/executor/execUtils.c

src/backend/executor/nodeCtescan.c

src/backend/executor/nodeHash.c

src/backend/executor/nodeSubplan.c

src/backend/libpq/pqcomm.c

src/backend/nls.mk

src/backend/nodes/copyfuncs.c

src/backend/nodes/equalfuncs.c

src/backend/nodes/outfuncs.c

src/backend/optimizer/path/allpaths.c

src/backend/optimizer/path/costsize.c

src/backend/optimizer/path/equivclass.c

src/backend/optimizer/path/indxpath.c

src/backend/optimizer/plan/initsplan.c

src/backend/optimizer/plan/planner.c

src/backend/optimizer/plan/subselect.c

src/backend/optimizer/prep/prepjointree.c

src/backend/optimizer/prep/prepunion.c

src/backend/optimizer/util/plancat.c

src/backend/parser/analyze.c

src/backend/parser/gram.c

src/backend/parser/gram.y

src/backend/parser/parse_cte.c

src/backend/parser/parse_expr.c

src/backend/parser/parse_relation.c

src/backend/parser/parse_utilcmd.c

src/backend/po/de.po

src/backend/po/es.po

src/backend/po/fr.po

src/backend/po/pt_BR.po

src/backend/po/tr.po

src/backend/po/zh_CN.po

src/backend/po/zh_TW.po

src/backend/port/win32_sema.c

src/backend/postmaster/bgwriter.c

src/backend/postmaster/postmaster.c

src/backend/postmaster/syslogger.c

src/backend/regex/Makefile

src/backend/regex/regc_color.c

src/backend/regex/regc_nfa.c

src/backend/regex/regcomp.c

src/backend/regex/rege_dfa.c

src/backend/rewrite/rewriteManip.c

src/backend/storage/lmgr/deadlock.c

src/backend/storage/lmgr/proc.c

src/backend/storage/smgr/md.c

src/backend/tcop/postgres.c

src/backend/tsearch/to_tsany.c

src/backend/utils/adt/acl.c

src/backend/utils/adt/date.c

src/backend/utils/adt/datetime.c

src/backend/utils/adt/enum.c

src/backend/utils/adt/formatting.c

src/backend/utils/adt/int.c

src/backend/utils/adt/int8.c

src/backend/utils/adt/name.c

src/backend/utils/adt/regexp.c

src/backend/utils/adt/rowtypes.c

src/backend/utils/adt/ruleutils.c

src/backend/utils/adt/selfuncs.c

src/backend/utils/adt/varchar.c

src/backend/utils/adt/varlena.c

src/backend/utils/adt/xml.c

src/backend/utils/cache/relcache.c

src/backend/utils/fmgr/fmgr.c

src/backend/utils/hash/dynahash.c

src/backend/utils/mb/mbutils.c

src/backend/utils/mb/wchar.c

src/backend/utils/misc/guc.c

src/bin/initdb/initdb.c

src/bin/initdb/po/cs.po

src/bin/initdb/po/de.po

src/bin/initdb/po/es.po

src/bin/initdb/po/fr.po

src/bin/initdb/po/it.po

src/bin/initdb/po/pl.po

src/bin/initdb/po/ru.po

src/bin/initdb/po/zh_CN.po

src/bin/pg_config/po/de.po

src/bin/pg_config/po/es.po

src/bin/pg_config/po/fr.po

src/bin/pg_config/po/it.po

src/bin/pg_config/po/pl.po

src/bin/pg_config/po/ru.po

src/bin/pg_controldata/nls.mk

src/bin/pg_controldata/po/de.po

src/bin/pg_controldata/po/es.po

src/bin/pg_controldata/po/fr.po

src/bin/pg_controldata/po/it.po

src/bin/pg_controldata/po/pl.po

src/bin/pg_ctl/pg_ctl.c

src/bin/pg_ctl/po/de.po

src/bin/pg_ctl/po/es.po

src/bin/pg_ctl/po/fr.po

src/bin/pg_ctl/po/it.po

src/bin/pg_ctl/po/ru.po

src/bin/pg_dump/common.c

src/bin/pg_dump/nls.mk

src/bin/pg_dump/pg_backup_archiver.c

src/bin/pg_dump/pg_backup_tar.c

src/bin/pg_dump/pg_dump.c

src/bin/pg_dump/pg_dump.h

src/bin/pg_dump/pg_dump_sort.c

src/bin/pg_dump/po/de.po

src/bin/pg_dump/po/es.po

src/bin/pg_dump/po/fr.po

src/bin/pg_dump/po/it.po

src/bin/pg_dump/po/pt_BR.po

src/bin/pg_dump/po/sv.po

src/bin/pg_resetxlog/pg_resetxlog.c

src/bin/pg_resetxlog/po/de.po

src/bin/pg_resetxlog/po/es.po

src/bin/pg_resetxlog/po/fr.po

src/bin/pg_resetxlog/po/it.po

src/bin/pg_resetxlog/po/ru.po

src/bin/psql/command.c

src/bin/psql/help.c

src/bin/psql/nls.mk

src/bin/psql/po/de.po

src/bin/psql/po/es.po

src/bin/psql/po/fr.po

src/bin/psql/po/it.po

src/bin/psql/po/ko.po

src/bin/psql/po/pt_BR.po

src/bin/psql/po/sv.po

src/bin/psql/print.c

src/bin/psql/psqlscan.c

src/bin/psql/psqlscan.l

src/bin/psql/sql_help.h

src/bin/scripts/nls.mk

src/bin/scripts/po/de.po

src/bin/scripts/po/es.po

src/bin/scripts/po/fr.po

src/bin/scripts/po/it.po

src/include/catalog/index.h

src/include/catalog/pg_index.h

src/include/commands/tablecmds.h

src/include/libpq/pqcomm.h

src/include/mb/pg_wchar.h

src/include/miscadmin.h

src/include/nodes/execnodes.h

src/include/nodes/nodes.h

src/include/nodes/parsenodes.h

src/include/nodes/relation.h

src/include/optimizer/planmain.h

src/include/pg_config.h.win32

src/include/port.h

src/include/regex/regex.h

src/include/regex/regguts.h

src/include/rewrite/rewriteManip.h

src/include/storage/relfilenode.h

src/include/utils/builtins.h

src/include/utils/selfuncs.h

src/include/utils/timestamp.h

src/interfaces/ecpg/ecpglib/misc.c

src/interfaces/ecpg/ecpglib/nls.mk

src/interfaces/ecpg/ecpglib/po/de.po

src/interfaces/ecpg/ecpglib/po/es.po

src/interfaces/ecpg/ecpglib/po/fr.po

src/interfaces/ecpg/ecpglib/po/it.po

src/interfaces/ecpg/preproc/nls.mk

src/interfaces/ecpg/preproc/po/de.po

src/interfaces/ecpg/preproc/po/es.po

src/interfaces/ecpg/preproc/po/fr.po

src/interfaces/ecpg/preproc/po/it.po

src/interfaces/ecpg/preproc/preproc.c

src/interfaces/ecpg/preproc/preproc.y

src/interfaces/ecpg/preproc/variable.c

src/interfaces/libpq/fe-connect.c

src/interfaces/libpq/fe-lobj.c

src/interfaces/libpq/fe-print.c

src/interfaces/libpq/libpq-dist.rc

src/interfaces/libpq/libpq.rc.in

src/interfaces/libpq/po/de.po

src/interfaces/libpq/po/es.po

src/interfaces/libpq/po/fr.po

src/interfaces/libpq/po/it.po

src/interfaces/libpq/po/pt_BR.po

src/interfaces/libpq/po/ru.po

src/interfaces/libpq/po/sv.po

src/interfaces/libpq/po/zh_CN.po

src/interfaces/libpq/po/zh_TW.po

src/makefiles/Makefile.aix

src/makefiles/pgxs.mk

src/pl/plperl/expected/plperl.out

src/pl/plperl/nls.mk

src/pl/plperl/plperl.c

src/pl/plperl/po/de.po

src/pl/plperl/po/es.po

src/pl/plperl/po/fr.po

src/pl/plperl/po/it.po

src/pl/plperl/sql/plperl.sql

src/pl/plpgsql/src/nls.mk

src/pl/plpgsql/src/pl_exec.c

src/pl/plpgsql/src/po/de.po

src/pl/plpgsql/src/po/es.po

src/pl/plpgsql/src/po/fr.po

src/pl/plpgsql/src/po/it.po

src/pl/plpython/nls.mk

src/pl/plpython/po/de.po

src/pl/plpython/po/es.po

src/pl/plpython/po/fr.po

src/pl/plpython/po/it.po

src/pl/tcl/nls.mk

src/pl/tcl/po/de.po

src/pl/tcl/po/es.po

src/pl/tcl/po/fr.po

src/pl/tcl/po/it.po

src/port/exec.c

src/port/path.c

src/port/sprompt.c

src/port/win32ver.rc

src/test/examples/testlo.c

src/test/regress/expected/alter_table.out

src/test/regress/expected/copy2.out

src/test/regress/expected/int2.out

src/test/regress/expected/int4.out

src/test/regress/expected/int8-exp-three-digits.out

src/test/regress/expected/int8.out

src/test/regress/expected/interval.out

src/test/regress/expected/join.out

src/test/regress/expected/privileges.out

src/test/regress/expected/rules.out

src/test/regress/expected/sequence.out

src/test/regress/expected/sequence_1.out

src/test/regress/expected/subselect.out

src/test/regress/expected/with.out

src/test/regress/expected/xml.out

src/test/regress/expected/xml_1.out

src/test/regress/pg_regress.c

src/test/regress/sql/alter_table.sql

src/test/regress/sql/copy2.sql

src/test/regress/sql/int2.sql

src/test/regress/sql/int4.sql

src/test/regress/sql/int8.sql

src/test/regress/sql/interval.sql

src/test/regress/sql/join.sql

src/test/regress/sql/privileges.sql

src/test/regress/sql/rules.sql

src/test/regress/sql/subselect.sql

src/test/regress/sql/with.sql

src/test/regress/sql/xml.sql

src/timezone/data/africa

src/timezone/data/antarctica

src/timezone/data/asia

src/timezone/data/australasia

src/timezone/data/backward

src/timezone/data/etcetera

src/timezone/data/europe

src/timezone/data/factory

src/timezone/data/iso3166.tab

src/timezone/data/leapseconds

src/timezone/data/northamerica

src/timezone/data/pacificnew

src/timezone/data/solar87

src/timezone/data/solar88

src/timezone/data/solar89

src/timezone/data/southamerica

src/timezone/data/systemv

src/timezone/data/yearistype.sh

src/timezone/data/zone.tab

src/timezone/localtime.c

src/timezone/tznames/Default

src/timezone/tznames/Europe.txt

src/tools/msvc/Install.pm

src/tools/msvc/Project.pm

Show diffs side-by-side

added added

removed removed

src/bin/psql/psqlscan.c

7206

7206

/* first byte should always be okay... */

7207

7207

newtxt[i] = txt[i];

7208

7208

i++;

7209

while (--thislen > 0)

7209

while (--thislen > 0 && i < len)

7210

7210

newtxt[i++] = (char) 0xFF;

7211

7211

}

7212

7212

}

Older »