Josh Roberson f66edcb8b0 cel_pgsql.c: Fix buffer overflow calling libpq ...

PQEscapeStringConn() expects the buffer passed in to be an
adequitely sized buffer to write out the escaped SQL value string
into.  It is possible, for large values (such as large values to
Dial with a lot of devices) to have more than our 512+1 byte
allocation and thus cause libpq to create a buffer overrun.

glibc will nicely ABRT asterisk for you, citing a stack smash.

Let's only allocate it to be as large as needed:
If we have a value, then (strlen(value) * 2) + 1 (as recommended
by libpq), and if we have none, just one byte to hold our null
will do.

ASTERISK-26896 #close

Change-Id: If611c734292618ed68dde17816d09dd16667dea2

2017-03-29 07:54:14 -06:00

..

cel_custom.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

cel_manager.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

cel_odbc.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

cel_pgsql.c

cel_pgsql.c: Fix buffer overflow calling libpq

2017-03-29 07:54:14 -06:00

cel_radius.c

Add support for building RADIUS with radcli

2016-11-14 19:40:03 +02:00

cel_sqlite3_custom.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

cel_tds.c

Remove ASTERISK_REGISTER_FILE.

2016-10-27 09:53:55 -04:00

Makefile

Title update

2012-10-14 21:56:13 +00:00