Fix a *second* buffer overrun bug in to_ascii(). Grumble.

diff --git a/src/backend/utils/adt/ascii.c b/src/backend/utils/adt/ascii.c
index 4f5a223ddc765970ac706a73b8c233804d0663a4..bb2cc9ef843d828ee1c80714d81f8be2531caa35 100644 (file)
--- a/src/backend/utils/adt/ascii.c
+++ b/src/backend/utils/adt/ascii.c
@@ -94,7 +94,7 @@ encode_to_ascii(text *data, int enc)
 {
        pg_to_ascii(
                                (unsigned char *) VARDATA(data),                /* src */
-                               VARDATA(data) + VARSIZE(data),  /* src end */
+                               (unsigned char *) (data) + VARSIZE(data),       /* src end */
                                (unsigned char *) VARDATA(data),                /* desc */
                                enc);                   /* encoding */