Fix a bug in is_setting_search_path. A pointer might be incremented to point beyond...

Report and patch by Grant Shirreffs.

diff --git a/connection.c b/connection.c
index c945549f07b73b59c89276b034c04ec45e380b61..ed51e02fd4ae8c9ee4a25725ad6273bb820529f4 100644 (file)
--- a/connection.c
+++ b/connection.c
@@ -1601,7 +1601,7 @@ is_setting_search_path(const char *query)
        return FALSE;
    q += 3;
    while (isspace(*q)) q++;
-   for (; *q; q++)
+   for (; *q;)
    {
        if (IS_NOT_SPACE(*q))
        {
@@ -1611,6 +1611,8 @@ is_setting_search_path(const char *query)
            while (IS_NOT_SPACE(*q))
                q++;
        }
+       else
+           q++;
    }
    return FALSE;
 }