pgsql: Replace fixed-size, too-short array with a palloc'd one. - Mailing list pgsql-committers

From Noah Misch
Subject pgsql: Replace fixed-size, too-short array with a palloc'd one.
Date
Msg-id E1wtQFu-00000000yJI-2UZq@gemulon.postgresql.org
Whole thread
List pgsql-committers
Replace fixed-size, too-short array with a palloc'd one.

MatchNamedCall's arggiven array was declared FUNC_MAX_ARGS long,
but we may actually use up to pronallargs elements, and that can
be more than FUNC_MAX_ARGS if the function has OUT arguments
(cf. ProcedureCreate).  Convert it to a palloc'd array.

Reported-by: Zheng Yu <zheng@depthfirst.com>
Reported-by: ylwangtju <ylwangtju@qq.com>
Author: Tom Lane <tgl@sss.pgh.pa.us>
Reviewed-by: Michael Paquier <michael@paquier.xyz>
Reviewed-by: Masahiko Sawada <sawada.mshk@gmail.com>
Backpatch-through: 14
Security: CVE-2026-14679

Branch
------
REL_15_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/b417744a7035dd9c282fedbf24f5d4c8d45fccb1
Author: Tom Lane <tgl@sss.pgh.pa.us>

Modified Files
--------------
src/backend/catalog/namespace.c | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)


pgsql-committers by date:

Previous
From: Noah Misch
Date:
Subject: pgsql: Use value of scram_iterations in mock_scram_secret().
Next
From: Noah Misch
Date:
Subject: pgsql: Obstruct EXTRACT() field name deparse injection.