Request a Demo
Home   >   mailing lists

Re: [PATCH] intarray: prevent crash in _int_matchsel on invalid query_int input - Mailing list pgsql-hackers

From Tom Lane
Subject Re: [PATCH] intarray: prevent crash in _int_matchsel on invalid query_int input
Date
Msg-id 1404727.1772635892@sss.pgh.pa.us
Whole thread Raw
In response to [PATCH] intarray: prevent crash in _int_matchsel on invalid query_int input  (Eugeny Goryachev <gorcom2012@gmail.com>)
List pgsql-hackers
Tree view 
Eugeny Goryachev <gorcom2012@gmail.com> writes:
> The selectivity function _int_matchsel() in contrib/intarray
> assumes that the right-hand argument is a valid query_int datum.
> If a malformed or binary-incompatible value is passed (for example,
> via an implicit cast from a user-defined type created WITHOUT FUNCTION),
> the function may dereference an invalid pointer and crash.

Didn't we fix that in CVE-2026-2004?

            regards, tom lane

pgsql-hackers by date:

Previous
From: Dave Cramer
Date:
Subject: Re: Proposal to allow setting cursor options on Portals
Next
From: Nazir Bilal Yavuz
Date:
Subject: Re: Speed up COPY FROM text/CSV parsing using SIMD