Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: IvorySQL/IvorySQL
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: master
Choose a base ref
...
head repository: NotHimmel/IvorySQL
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: master
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 2 commits
  • 14 files changed
  • 2 contributors

Commits on Jan 16, 2026

  1. Fix identifier case handling for multi-byte characters.

    @NotHimmel
    NotHimmel committed Jan 16, 2026
    Configuration menu
    Copy the full SHA
    7677144 View commit details
    Browse the repository at this point in the history

Commits on Jan 23, 2026

  1. fix: Replace sprintf with snprintf in dsinterval.c and yminterval.c 

    This fixes critical buffer overflow vulnerabilities where multiple sprintf()
calls write to buffers without bounds checking. The fix adds:

1. A bufsize parameter to AppendSeconds() function in both files
2. remaining_bufsize tracking in EncodeDsinterval() and EncodeYminterval()
3. All sprintf() calls replaced with snprintf() using proper bounds

This prevents memory corruption and potential crashes when formatting
interval values with large precision values.

Affected lines:
- dsinterval.c: 709, 711, 715, 722, 724, 791, 807, 816, 820, 826
- yminterval.c: 293, 295, 301, 303, 306, 308, 376, 390, 399, 403, 409

Co-Authored-By: Claude <noreply@anthropic.com>
    @NotHimmel @claude
    NotHimmel and claude committed Jan 23, 2026
    Configuration menu
    Copy the full SHA
    e834ca8 View commit details
    Browse the repository at this point in the history
Loading