aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTeodor Sigaev <teodor@sigaev.ru>2007-09-26 10:17:34 +0000
committerTeodor Sigaev <teodor@sigaev.ru>2007-09-26 10:17:34 +0000
commitd77a9018faffc2eed3f163de0b55e96064eaa25f (patch)
treee8ca0527b6bc667405f146519fc9bc869a015721
parent189f9a5bb2c7490c98e7a84ade9e20c85e9003e2 (diff)
downloadpostgresql-d77a9018faffc2eed3f163de0b55e96064eaa25f.tar.gz
postgresql-d77a9018faffc2eed3f163de0b55e96064eaa25f.zip
Fix crash of to_tsvector() function on huge input: compareWORD()
function didn't return correct result for word position greate than limit. Per report from Stuart Bishop <stuart@stuartbishop.net>
-rw-r--r--contrib/tsearch2/tsvector.c8
1 files changed, 7 insertions, 1 deletions
diff --git a/contrib/tsearch2/tsvector.c b/contrib/tsearch2/tsvector.c
index 1abf1914e33..059a247f186 100644
--- a/contrib/tsearch2/tsvector.c
+++ b/contrib/tsearch2/tsvector.c
@@ -604,7 +604,12 @@ compareWORD(const void *a, const void *b)
((TSWORD *) b)->len);
if (res == 0)
+ {
+ if ( ((TSWORD *) a)->pos.pos == ((TSWORD *) b)->pos.pos )
+ return 0;
+
return (((TSWORD *) a)->pos.pos > ((TSWORD *) b)->pos.pos) ? 1 : -1;
+ }
return res;
}
return (((TSWORD *) a)->len > ((TSWORD *) b)->len) ? 1 : -1;
@@ -654,7 +659,8 @@ uniqueWORD(TSWORD * a, int4 l)
else
{
pfree(ptr->word);
- if (res->pos.apos[0] < MAXNUMPOS - 1 && res->pos.apos[res->pos.apos[0]] != MAXENTRYPOS - 1)
+ if (res->pos.apos[0] < MAXNUMPOS - 1 && res->pos.apos[res->pos.apos[0]] != MAXENTRYPOS - 1 &&
+ res->pos.apos[res->pos.apos[0]] != LIMITPOS(ptr->pos.pos) )
{
if (res->pos.apos[0] + 1 >= res->alen)
{