Fix access past end of string in date parsing.

hlinnaka · hlinnaka · commit 23355e6cb927 · 2012-10-02T10:46:12.000+03:00
This affects date_in(), and a couple of other funcions that use DecodeDate().

Hitoshi Harada
diff --git a/src/backend/utils/adt/datetime.c b/src/backend/utils/adt/datetime.c
@@ -2165,9 +2165,12 @@ DecodeDate(char *str, int fmask, int *tmask, bool *is2digits,
 	while (*str != '\0' && nf < MAXDATEFIELDS)
 	{
 		/* skip field separators */
-		while (!isalnum((unsigned char) *str))
+		while (*str != '\0' && !isalnum((unsigned char) *str))
 			str++;
 
+		if (*str == '\0')
+			return DTERR_BAD_FORMAT;		/* end of string after separator */
+
 		field[nf] = str;
 		if (isdigit((unsigned char) *str))
 		{

Original file line number	Diff line number	Diff line change
`@@ -2165,9 +2165,12 @@ DecodeDate(char str, int fmask, int tmask, bool *is2digits,`
`2165`	`2165`	`while (*str != '\0' && nf < MAXDATEFIELDS)`
`2166`	`2166`	`{`
`2167`	`2167`	`/* skip field separators */`
`2168`		`- while (!isalnum((unsigned char) *str))`
	`2168`	`+ while (str != '\0' && !isalnum((unsigned char) str))`
`2169`	`2169`	`str++;`
`2170`	`2170`
	`2171`	`+ if (*str == '\0')`
	`2172`	`+ return DTERR_BAD_FORMAT; /* end of string after separator */`
	`2173`	`+`
`2171`	`2174`	`field[nf] = str;`
`2172`	`2175`	`if (isdigit((unsigned char) *str))`
`2173`	`2176`	`{`