Re: pg17.3 PQescapeIdentifier() ignores len - Mailing list pgsql-hackers

From Christoph Berg
Subject Re: pg17.3 PQescapeIdentifier() ignores len
Date
Msg-id Z7DG8LX-vEt7Asdy@msg.df7cb.de
Whole thread Raw
In response to Re: pg17.3 PQescapeIdentifier() ignores len  (Andres Freund <andres@anarazel.de>)
Responses Re: pg17.3 PQescapeIdentifier() ignores len
List pgsql-hackers
Re: Andres Freund
> > What's missing in the PG regression tests to see that problem?
> 
> Well, the expanded tests added as part of the fix would catch it, but I agree,
> it's a problem this wasn't caught beforehand.

Oh sorry, I was actually skimming the git log to see if there is a
test, but then failed to realize there is one. Thanks!

> I don't think that common uses of PQescapeIdentifier/Literal are likely to
> catch the problem, so it's perhaps not too surprising it wasn't caught. Which,
> I guess, shows that we really need more explicit edge-case coverage of at
> least the most crucial APIs (we barely have any).  There's pretty much no way
> that pg_regress or TAP test style tests are going to catch a problem like
> this.

What I can do is to trigger regression tests on all packages on
apt.postgresql.org after the minor releases have been built and then
raise any flags before the release goes out.

Except that pygresql isn't yet a package on apt.pg.o... will fix that
now. This time, the problem was caught by Debian's CI machinery.

Christoph



pgsql-hackers by date:

Previous
From: Andres Freund
Date:
Subject: Re: pg17.3 PQescapeIdentifier() ignores len
Next
From: Mark Wong
Date:
Subject: Re: New buildfarm animals with FIPS mode enabled