]> git.evergreen-ils.org Git - Evergreen.git/commit
Protect against overly long savepoint names
authorDan Scott <dscott@laurentian.ca>
Fri, 11 Jan 2013 06:32:13 +0000 (01:32 -0500)
committerBill Erickson <berick@esilibrary.com>
Wed, 16 Jan 2013 20:02:41 +0000 (15:02 -0500)
commit2ff9dd8e0cad44ed26e46c32b3c291c1ab51dc70
treeeb4b9272604abe2993a20d09cd4d91250b99ca12
parent067ea0c73cf84bbedf4f6dc4de10a46b479d3b34
Protect against overly long savepoint names

Per http://postgresql.org/docs/9.1/static/sql-syntax-lexical.html#SQL-SYNTAX-IDENTIFIERS,
the maximum identifier length works out to being 63 bytes (+1 for the
null terminator), so to avoid potential memory pressure by a 10GB string
somehow being passed in as the savepoint name, malloc no more than 64
bytes and copy no more than 63 bytes from the incoming name to the
escaped name.

Signed-off-by: Dan Scott <dscott@laurentian.ca>
Signed-off-by: Galen Charlton <gmc@esilibrary.com>
Open-ILS/src/c-apps/oils_sql.c