aboutsummaryrefslogtreecommitdiff
path: root/src/backend/utils/adt/xml.c
diff options
context:
space:
mode:
authorDavid Rowley <drowley@postgresql.org>2024-07-06 14:00:29 +1200
committerDavid Rowley <drowley@postgresql.org>2024-07-06 14:00:29 +1200
commit49e29cbe8cbcb6bd4ac6c5dc64b1ad27844c1b5c (patch)
treef4fc373ea4b8edcaeb7dc32acdaadb704ba165d9 /src/backend/utils/adt/xml.c
parent31423bc4489d03112343395e94c9330e44983beb (diff)
downloadpostgresql-49e29cbe8cbcb6bd4ac6c5dc64b1ad27844c1b5c.tar.gz
postgresql-49e29cbe8cbcb6bd4ac6c5dc64b1ad27844c1b5c.zip
Fix incorrect sentinel byte logic in GenerationRealloc()
This only affects MEMORY_CONTEXT_CHECKING builds. This fixes an off-by-one issue in GenerationRealloc() where the fast-path code which tries to reuse the existing allocation if the existing chunk is >= the new requested size. The code there thought it was always ok to use the existing chunk, but when oldsize == size there isn't enough space to store the sentinel byte. If both sizes matched exactly set_sentinel() would overwrite the first byte beyond the chunk and then subsequent GenerationRealloc() calls could then fail the Assert(chunk->requested_size < oldsize) check which is trying to ensure the chunk is large enough to store the sentinel. The same issue does not exist in aset.c as the sentinel checking code only adds a sentinel byte if there's enough space in the chunk. Reported-by: Alexander Lakhin <exclusion@gmail.com> Discussion: https://postgr.es/m/49275921-7b39-41af-5eb8-97b50ce3312e@gmail.com Backpatch-through: 16, where the problem was introduced by 0e480385e
Diffstat (limited to 'src/backend/utils/adt/xml.c')
0 files changed, 0 insertions, 0 deletions