diff options
Diffstat (limited to 'dev-db/postgresql/files/postgresql-7.3.9-securityfix.patch')
-rw-r--r-- | dev-db/postgresql/files/postgresql-7.3.9-securityfix.patch | 60 |
1 files changed, 0 insertions, 60 deletions
diff --git a/dev-db/postgresql/files/postgresql-7.3.9-securityfix.patch b/dev-db/postgresql/files/postgresql-7.3.9-securityfix.patch deleted file mode 100644 index 85540103d76c..000000000000 --- a/dev-db/postgresql/files/postgresql-7.3.9-securityfix.patch +++ /dev/null @@ -1,60 +0,0 @@ ---- pgsql/src/pl/plpgsql/src/gram.y 2005/01/27 01:44:42 1.39.2.1 -+++ pgsql/src/pl/plpgsql/src/gram.y 2005/02/08 18:22:45 1.39.2.2 -@@ -1612,6 +1612,14 @@ read_sql_construct(int until, - } - if (plpgsql_SpaceScanned) - plpgsql_dstring_append(&ds, " "); -+ -+ /* Check for array overflow */ -+ if (nparams >= 1024) -+ { -+ plpgsql_error_lineno = lno; -+ elog(ERROR, "too many variables specified in SQL statement"); -+ } -+ - switch (tok) - { - case T_VARIABLE: -@@ -1761,6 +1769,13 @@ make_select_stmt(void) - - while ((tok = yylex()) == ',') - { -+ /* Check for array overflow */ -+ if (nfields >= 1024) -+ { -+ plpgsql_error_lineno = yylineno; -+ elog(ERROR, "too many INTO variables specified"); -+ } -+ - tok = yylex(); - switch(tok) - { -@@ -1809,6 +1824,14 @@ make_select_stmt(void) - - if (plpgsql_SpaceScanned) - plpgsql_dstring_append(&ds, " "); -+ -+ /* Check for array overflow */ -+ if (nparams >= 1024) -+ { -+ plpgsql_error_lineno = yylineno; -+ elog(ERROR, "too many variables specified in SQL statement"); -+ } -+ - switch (tok) - { - case T_VARIABLE: -@@ -1892,6 +1915,13 @@ make_fetch_stmt(void) - - while ((tok = yylex()) == ',') - { -+ /* Check for array overflow */ -+ if (nfields >= 1024) -+ { -+ plpgsql_error_lineno = yylineno; -+ elog(ERROR, "too many INTO variables specified"); -+ } -+ - tok = yylex(); - switch(tok) - { |