Postgres Pro
Downloads
Home   >   mailing lists

pgsql: array_in() and array_recv() need to be more paranoid about - Mailing list pgsql-committers

From [email protected] (Tom Lane)
Subject pgsql: array_in() and array_recv() need to be more paranoid about
Date
Msg-id [email protected]
Whole thread Raw
List pgsql-committers
Tree view 
Log Message:
-----------
array_in() and array_recv() need to be more paranoid about validating
their OID parameter.  It was possible to crash the backend with
select array_in('{123}',0,0); because that would bypass the needed step
of initializing the workspace.  These seem to be the only two places
with a problem, though (record_in and record_recv don't have the issue,
and the other array functions aren't depending on user-supplied input).
Back-patch as far as 7.4; 7.3 does not have the bug.

Tags:
----
REL7_4_STABLE

Modified Files:
--------------
    pgsql/src/backend/utils/adt:
        arrayfuncs.c (r1.100.2.3 -> r1.100.2.4)

(http://developer.postgresql.org/cvsweb.cgi/pgsql/src/backend/utils/adt/arrayfuncs.c.diff?r1=1.100.2.3&r2=1.100.2.4)

pgsql-committers by date:

Previous
From: [email protected] (Tom Lane)
Date:
Subject: pgsql: array_in() and array_recv() need to be more paranoid about
Next
From: [email protected] (Tom Lane)
Date:
Subject: pgsql: Make createlang and droplang proof against weird search_path