Fix xslt_process() to ensure that it inserts a NULL terminator after the
authorTom Lane <tgl@sss.pgh.pa.us>
Fri, 10 Jul 2009 00:32:00 +0000 (00:32 +0000)
committerTom Lane <tgl@sss.pgh.pa.us>
Fri, 10 Jul 2009 00:32:00 +0000 (00:32 +0000)
commiteb740a6b854f8bf5ba21d5127b6d5be1bfe035e2
tree7c753e8ec511ef06c89a4f474af1489e876efaf4
parentb7240baa08396c71dc64f3498e10e73e638cf4a8
Fix xslt_process() to ensure that it inserts a NULL terminator after the
last pair of parameter name/value strings, even when there are MAXPARAMS
of them.  Aboriginal bug in contrib/xml2, noted while studying bug #4912
(though I'm not sure whether there's something else involved in that
report).

This might be thought a security issue, since it's a potential backend
crash; but considering that untrustworthy users shouldn't be allowed
to get their hands on xslt_process() anyway, it's probably not worth
getting excited about.
contrib/xml2/xslt_proc.c