pgsql: Replace fixed-size, too-short array with a palloc'd one.

Replace fixed-size, too-short array with a palloc'd one.

MatchNamedCall's arggiven array was declared FUNC_MAX_ARGS long,
but we may actually use up to pronallargs elements, and that can
be more than FUNC_MAX_ARGS if the function has OUT arguments
(cf. ProcedureCreate). Convert it to a palloc'd array.

Reported-by: Zheng Yu <zheng(at)depthfirst(dot)com>
Reported-by: ylwangtju <ylwangtju(at)qq(dot)com>
Author: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Reviewed-by: Michael Paquier <michael(at)paquier(dot)xyz>
Reviewed-by: Masahiko Sawada <sawada(dot)mshk(at)gmail(dot)com>
Backpatch-through: 14
Security: CVE-2026-14679

Branch
------
REL_18_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/7f0e1aac7a7b54b6b575a3b4d6c90088dd90c38b
Author: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>

Modified Files
--------------
src/backend/catalog/namespace.c | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)