Seg-fault in format(text) - Mailing list pgsql-bugs

From Dean Rasheed
Subject Seg-fault in format(text)
Date
Msg-id BANLkTikCHX07tiKBnHM4EM2FE=Cw+sznHQ@mail.gmail.com
Whole thread Raw
Responses Re: Seg-fault in format(text)
List pgsql-bugs
Testing 9.1beta:

select format('Hello %s, %2147483648$s', 'World');
server closed the connection unexpectedly
    This probably means the server terminated abnormally
    before or while processing the request.
The connection to the server was lost. Attempting reset: Failed.

The problem is that the test for overflow of the arg position doesn't
catch all cases. The simplest solution is to just tweak the comparison
at varlena.c:3840 (patch attached) although maybe there are neater
ways...

Regards,
Dean

Attachment

pgsql-bugs by date:

Previous
From: "Daniel Schreiber"
Date:
Subject: BUG #6035: server crash when executing recursive query (trying to allocate 16 Exabyte memory)
Next
From: Tom Lane
Date:
Subject: Re: Seg-fault in format(text)