Skip to content

Fix buffer overflow in DateLUT#19472

Merged
alexey-milovidov merged 1 commit intomasterfrom
date-lut-buffer-overflow
Jan 23, 2021
Merged

Fix buffer overflow in DateLUT#19472
alexey-milovidov merged 1 commit intomasterfrom
date-lut-buffer-overflow

Conversation

@alexey-milovidov
Copy link
Copy Markdown
Member

@alexey-milovidov alexey-milovidov commented Jan 22, 2021

Changelog category (leave one):

  • Bug Fix

Changelog entry (a user-readable short description of the changes that goes to CHANGELOG.md):
Buffer overflow (on memory read) was possible if addMonth function was called with specifically crafted arguments. This fixes #19441. This fixes #19413.

@robot-clickhouse robot-clickhouse added the pr-bugfix Pull request with bugfix, not backported by default label Jan 22, 2021
@alexey-milovidov alexey-milovidov self-assigned this Jan 23, 2021
@alexey-milovidov alexey-milovidov merged commit 9baac12 into master Jan 23, 2021
@alexey-milovidov alexey-milovidov deleted the date-lut-buffer-overflow branch January 23, 2021 09:05
alexey-milovidov added a commit that referenced this pull request Jan 23, 2021
Backport #19472 to 20.12: Fix buffer overflow in DateLUT
alexey-milovidov added a commit that referenced this pull request Jan 23, 2021
Backport #19472 to 20.11: Fix buffer overflow in DateLUT
alexey-milovidov added a commit that referenced this pull request Jan 23, 2021
Backport #19472 to 20.10: Fix buffer overflow in DateLUT
alexey-milovidov added a commit that referenced this pull request Jan 23, 2021
Backport #19472 to 21.1: Fix buffer overflow in DateLUT
alexey-milovidov added a commit that referenced this pull request Feb 19, 2021
Backport #19472 to 20.8: Fix buffer overflow in DateLUT
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pr-bugfix Pull request with bugfix, not backported by default

Projects

None yet

Development

Successfully merging this pull request may close these issues.

AddressSanitizer: heap-buffer-overflow on address in DateLUT MemorySanitizer: use-of-uninitialized-value in DateLUTImpl::addMonths

2 participants