| From: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
|---|---|
| To: | pgsql-committers(at)lists(dot)postgresql(dot)org |
| Subject: | pgsql: Fix integer-overflow problem in intarray's g_int_decompress(). |
| Date: | 2024-01-07 20:20:03 |
| Message-ID: | E1rMZcp-000Mkz-I0@gemulon.postgresql.org |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-committers |
Fix integer-overflow problem in intarray's g_int_decompress().
An array element equal to INT_MAX gave this code indigestion,
causing an infinite loop that surely ended in SIGSEGV. We fixed
some nearby problems awhile ago (cf 757c5182f) but missed this.
Report and diagnosis by Alexander Lakhin (bug #18273); patch by me
Discussion: https://postgr.es/m/18273-9a832d1da122600c@postgresql.org
Branch
------
REL_15_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/940ab02b53eb3a3babc9dd4dea261f5a6d8aa334
Modified Files
--------------
contrib/intarray/_int_gist.c | 10 ++++++----
contrib/intarray/data/test__int.data | 1 +
contrib/intarray/expected/_int.out | 33 +++++++++++++++++----------------
contrib/intarray/sql/_int.sql | 5 +++--
4 files changed, 27 insertions(+), 22 deletions(-)
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Alexander Korotkov | 2024-01-08 13:10:07 | pgsql: Strengthen tests for 5ef34a8fc3 |
| Previous Message | Alexander Korotkov | 2024-01-07 07:33:07 | pgsql: Fix oversized memory allocation in Parallel Hash Join |