Fix access past end of string in date parsing.

hlinnaka · hlinnaka · commit 0899556e9295 · 2012-10-02T10:43:48.000+03:00
This affects date_in(), and a couple of other funcions that use DecodeDate().

Hitoshi Harada
diff --git a/src/backend/utils/adt/datetime.c b/src/backend/utils/adt/datetime.c
@@ -2176,9 +2176,12 @@ DecodeDate(char *str, int fmask, int *tmask, bool *is2digits,
 	while (*str != '\0' && nf < MAXDATEFIELDS)
 	{
 		/* skip field separators */
-		while (!isalnum((unsigned char) *str))
+		while (*str != '\0' && !isalnum((unsigned char) *str))
 			str++;
 
+		if (*str == '\0')
+			return DTERR_BAD_FORMAT;		/* end of string after separator */
+
 		field[nf] = str;
 		if (isdigit((unsigned char) *str))
 		{

Original file line number	Diff line number	Diff line change
`@@ -2176,9 +2176,12 @@ DecodeDate(char str, int fmask, int tmask, bool *is2digits,`
`2176`	`2176`	`while (*str != '\0' && nf < MAXDATEFIELDS)`
`2177`	`2177`	`{`
`2178`	`2178`	`/* skip field separators */`
`2179`		`- while (!isalnum((unsigned char) *str))`
	`2179`	`+ while (str != '\0' && !isalnum((unsigned char) str))`
`2180`	`2180`	`str++;`
`2181`	`2181`
	`2182`	`+ if (*str == '\0')`
	`2183`	`+ return DTERR_BAD_FORMAT; /* end of string after separator */`
	`2184`	`+`
`2182`	`2185`	`field[nf] = str;`
`2183`	`2186`	`if (isdigit((unsigned char) *str))`
`2184`	`2187`	`{`