NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commit264d284

committed

waldump: fix use-after-free in search_directory().

After closedir() dirent->d_name is not valid anymore. As there alerady are afew places relying on the limited lifetime of pg_waldump, do so here as well,and just pg_strdup() the string.The bug was introduced infc49e24.Found by UBSan, run locally.Backpatch: 11-, likefc49e24 itself.

1 parentcc7401d commit264d284Copy full SHA for 264d284

File tree

1 file changed

-1

lines changed

src/bin/pg_waldump
- pg_waldump.c

1 file changed

-1

lines changed

`‎src/bin/pg_waldump/pg_waldump.c`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -204,7 +204,7 @@ search_directory(const char directory, const char fname)`
`204`	`204`	`if (IsXLogFileName(xlde->d_name))`
`205`	`205`	`{`
`206`	`206`	`fd=open_file_in_directory(directory,xlde->d_name);`
`207`		`-fname=xlde->d_name;`
	`207`	`+fname=pg_strdup(xlde->d_name);`
`208`	`208`	`break;`
`209`	`209`	`}`
`210`	`210`	`}`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commit264d284

File tree

1 file changed

1 file changed

`‎src/bin/pg_waldump/pg_waldump.c`

0 commit comments