[HACKERS] Sprintf() auditing and a patch

2002-09-03 Thread Jukka Holappa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I'm very new to this project and inspired by recent security release, I started to audit postgresql source against common mistakes with sprintf(). I mostly found problems with sprintf() used on statically allocated buffers or dynamically

[HACKERS] [PATCH] Sprintf() patch against current CVS tree.

2002-08-30 Thread Jukka Holappa
Hi, I checked all the previous string handling errors and most of them were already fixed by You. However there were a few left and attached patch should fix the rest of them. I used StringInfo only in 2 places and both of them are inside debug ifdefs. Only performance penalty will come from

[HACKERS] [PATCH] Sprintf() patch against current CVS tree.

2002-08-29 Thread Jukka Holappa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I checked all the previous string handling errors and most of them were already fixed by You. However there were a few left and this patch should fix the rest of them. I used StringInfo only in 2 places and both of them are inside debug ifdefs.

[HACKERS] [Resend] Sprintf() auditing and a patch

2002-08-28 Thread Jukka Holappa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This is a resend of my previous email which was stucked at moderation approval.. and as I don't know if anyone actually does that in your list, I'm resending this now. Hi, I'm very new to this project and inspired by recent security release, I

Re: [HACKERS] [Resend] Sprintf() auditing and a patch

2002-08-28 Thread Jukka Holappa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bruce Momjian wrote: | I have reviewed your patch, and it is a thorough job. Unfortunately, | our code has drifted dramatically since 7.2 in the areas you patched. | Would you be able to download our CVS or current snapshot and submit a | patch