On 10.02.2016 18:51, Teodor Sigaev wrote:
using %s in scanf looks suspisious. I don't fully understand but it
looks like it tries to read oid as string. So, it should be safe in
Next, _LoadBlobs() reads filename (fname) with a help of sscanf. Could
file name be in UTF-8 encoding here?
This function reads the "blobs.toc" file. It lines have the following
Where <filename> is blob_<uid>.dat.
Therefore it should be safe too.
Postgres Professional: http://www.postgrespro.com
Russian Postgres Company
Sent via pgsql-hackers mailing list (email@example.com)
To make changes to your subscription: