Protect against overly long savepoint names
authorDan Scott <dscott@laurentian.ca>
Fri, 11 Jan 2013 06:32:13 +0000 (01:32 -0500)
committerDan Scott <dscott@laurentian.ca>
Thu, 17 Jan 2013 04:51:22 +0000 (23:51 -0500)
commit68fd702f5107e22806d99cec47c36bc021765aa1
tree7708fdfed356ed82d5e7bedeaf1953c9dcf00945
parent3d7554d633bd2f07080feee7eb1255ac5714b3ba
Protect against overly long savepoint names

Per http://postgresql.org/docs/9.1/static/sql-syntax-lexical.html#SQL-SYNTAX-IDENTIFIERS,
the maximum identifier length works out to being 63 bytes (+1 for the
null terminator), so to avoid potential memory pressure by a 10GB string
somehow being passed in as the savepoint name, malloc no more than 64
bytes and copy no more than 63 bytes from the incoming name to the
escaped name.

Signed-off-by: Dan Scott <dscott@laurentian.ca>
Signed-off-by: Galen Charlton <gmc@esilibrary.com>
Open-ILS/src/c-apps/oils_sql.c