Fix access past end of string in date parsing.

hlinnaka · hlinnaka · commit 6c00b2bbf772 · 2012-10-02T10:47:39.000+03:00
This affects date_in(), and a couple of other funcions that use DecodeDate().

Hitoshi Harada
diff --git a/src/backend/utils/adt/datetime.c b/src/backend/utils/adt/datetime.c
@@ -2169,9 +2169,12 @@ DecodeDate(char *str, int fmask, int *tmask, bool *is2digits,
 	while (*str != '\0' && nf < MAXDATEFIELDS)
 	{
 		/* skip field separators */
-		while (!isalnum((unsigned char) *str))
+		while (*str != '\0' && !isalnum((unsigned char) *str))
 			str++;
 
+		if (*str == '\0')
+			return DTERR_BAD_FORMAT;		/* end of string after separator */
+
 		field[nf] = str;
 		if (isdigit((unsigned char) *str))
 		{

Original file line number	Diff line number	Diff line change
`@@ -2169,9 +2169,12 @@ DecodeDate(char str, int fmask, int tmask, bool *is2digits,`
`2169`	`2169`	`while (*str != '\0' && nf < MAXDATEFIELDS)`
`2170`	`2170`	`{`
`2171`	`2171`	`/* skip field separators */`
`2172`		`- while (!isalnum((unsigned char) *str))`
	`2172`	`+ while (str != '\0' && !isalnum((unsigned char) str))`
`2173`	`2173`	`str++;`
`2174`	`2174`
	`2175`	`+ if (*str == '\0')`
	`2176`	`+ return DTERR_BAD_FORMAT; /* end of string after separator */`
	`2177`	`+`
`2175`	`2178`	`field[nf] = str;`
`2176`	`2179`	`if (isdigit((unsigned char) *str))`
`2177`	`2180`	`{`