Protect against overly long savepoint names
authorDan Scott <dscott@laurentian.ca>
Fri, 11 Jan 2013 06:32:13 +0000 (01:32 -0500)
committerBill Erickson <berick@esilibrary.com>
Wed, 16 Jan 2013 20:01:50 +0000 (15:01 -0500)
commita17f4a5e3961b049adcb8a556e3fcc9d770ed99f
tree75ddba5d0f998b0c46c92306b297c82f0cb4131e
parent955468b71d3cee9c97b27a8ddc90c1a2151aaac8
Protect against overly long savepoint names

Per http://postgresql.org/docs/9.1/static/sql-syntax-lexical.html#SQL-SYNTAX-IDENTIFIERS,
the maximum identifier length works out to being 63 bytes (+1 for the
null terminator), so to avoid potential memory pressure by a 10GB string
somehow being passed in as the savepoint name, malloc no more than 64
bytes and copy no more than 63 bytes from the incoming name to the
escaped name.

Signed-off-by: Dan Scott <dscott@laurentian.ca>
Signed-off-by: Galen Charlton <gmc@esilibrary.com>
Open-ILS/src/c-apps/oils_sql.c