Properly end string to make sure ecpglib does not read beyond its boundaries.

Michael Meskes · Michael Meskes · commit 8e6ab9f8012f · 2019-02-18T12:52:53.000+01:00
diff --git a/src/interfaces/ecpg/ecpglib/execute.c b/src/interfaces/ecpg/ecpglib/execute.c
@@ -1072,8 +1072,9 @@ print_param_value(char *value, int len, int is_binary, int lineno, int nth)
 		value_s = value;
 	else
 	{
-		value_s = ecpg_alloc(ecpg_hex_enc_len(len), lineno);
+		value_s = ecpg_alloc(ecpg_hex_enc_len(len)+1, lineno);
 		ecpg_hex_encode(value, len, value_s);
+		value_s[ecpg_hex_enc_len(len)] = '\0';
 		malloced = true;
 	}
 

Original file line number	Diff line number	Diff line change
`@@ -1072,8 +1072,9 @@ print_param_value(char *value, int len, int is_binary, int lineno, int nth)`
`1072`	`1072`	`value_s = value;`
`1073`	`1073`	`else`
`1074`	`1074`	`{`
`1075`		`- value_s = ecpg_alloc(ecpg_hex_enc_len(len), lineno);`
	`1075`	`+ value_s = ecpg_alloc(ecpg_hex_enc_len(len)+1, lineno);`
`1076`	`1076`	`ecpg_hex_encode(value, len, value_s);`
	`1077`	`+ value_s[ecpg_hex_enc_len(len)] = '\0';`
`1077`	`1078`	`malloced = true;`
`1078`	`1079`	`}`
`1079`	`1080`