NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commit344d89a

committed

waldump: fix use-after-free in search_directory().

After closedir() dirent->d_name is not valid anymore. As there alerady are afew places relying on the limited lifetime of pg_waldump, do so here as well,and just pg_strdup() the string.The bug was introduced infc49e24.Found by UBSan, run locally.Backpatch: 11-, likefc49e24 itself.

1 parent9016a2a commit344d89aCopy full SHA for 344d89a

File tree

1 file changed

-1

lines changed

src/bin/pg_waldump
- pg_waldump.c

1 file changed

-1

lines changed

`‎src/bin/pg_waldump/pg_waldump.c`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -177,7 +177,7 @@ search_directory(const char directory, const char fname)`
`177`	`177`	`if (IsXLogFileName(xlde->d_name))`
`178`	`178`	`{`
`179`	`179`	`fd=open_file_in_directory(directory,xlde->d_name);`
`180`		`-fname=xlde->d_name;`
	`180`	`+fname=pg_strdup(xlde->d_name);`
`181`	`181`	`break;`
`182`	`182`	`}`
`183`	`183`	`}`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commit344d89a

File tree

1 file changed

1 file changed

`‎src/bin/pg_waldump/pg_waldump.c`

0 commit comments