diff options
author | David Rowley <drowley@postgresql.org> | 2024-07-06 13:59:34 +1200 |
---|---|---|
committer | David Rowley <drowley@postgresql.org> | 2024-07-06 13:59:34 +1200 |
commit | 97651b0139cfa511eaf063b60c900c2ba81b8ba2 (patch) | |
tree | b337404f9dc4365ff0069da2db011012935fff3a /src/backend/utils/adt/xml.c | |
parent | 2a5ef09830401071be64d4eff3f6db421263a880 (diff) | |
download | postgresql-97651b0139cfa511eaf063b60c900c2ba81b8ba2.tar.gz postgresql-97651b0139cfa511eaf063b60c900c2ba81b8ba2.zip |
Fix incorrect sentinel byte logic in GenerationRealloc()
This only affects MEMORY_CONTEXT_CHECKING builds.
This fixes an off-by-one issue in GenerationRealloc() where the
fast-path code which tries to reuse the existing allocation if the
existing chunk is >= the new requested size. The code there thought it
was always ok to use the existing chunk, but when oldsize == size there
isn't enough space to store the sentinel byte. If both sizes matched
exactly set_sentinel() would overwrite the first byte beyond the chunk
and then subsequent GenerationRealloc() calls could then fail the
Assert(chunk->requested_size < oldsize) check which is trying to ensure
the chunk is large enough to store the sentinel.
The same issue does not exist in aset.c as the sentinel checking code
only adds a sentinel byte if there's enough space in the chunk.
Reported-by: Alexander Lakhin <exclusion@gmail.com>
Discussion: https://postgr.es/m/49275921-7b39-41af-5eb8-97b50ce3312e@gmail.com
Backpatch-through: 16, where the problem was introduced by 0e480385e
Diffstat (limited to 'src/backend/utils/adt/xml.c')
0 files changed, 0 insertions, 0 deletions