Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commit5c784d9

Browse files
committed
Fix off-by-one loop count in MapArrayTypeName, and get rid of static array.
MapArrayTypeName would copy up to NAMEDATALEN-1 bytes of the base typename, which of course is wrong: after prepending '_' there is only room forNAMEDATALEN-2 bytes. Aside from being the wrong result, this case wouldlead to overrunning the statically allocated work buffer. This would be asecurity bug if the function were ever used outside bootstrap mode, but itisn't, at least not in any currently supported branches.Aside from fixing the off-by-one loop logic, this patch gets rid of thestatic work buffer by having MapArrayTypeName pstrdup its result; the solecaller was already doing that, so this just requires moving the pstrdupcall. This saves a few bytes but mainly it makes the API a lot cleaner.Back-patch on the off chance that there is some third-party code usingMapArrayTypeName with less-secure input. Pushing pstrdup into the functionshould not cause any serious problems for such hypothetical code; at worstthere might be a short term memory leak.Per Coverity scanning.
1 parent926da21 commit5c784d9

File tree

3 files changed

+15
-20
lines changed

3 files changed

+15
-20
lines changed

‎src/backend/bootstrap/bootscanner.l

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -104,7 +104,7 @@ insert{ return(INSERT_TUPLE); }
104104
"toast"{return(XTOAST); }
105105

106106
{arrayid}{
107-
yylval.str =pstrdup(MapArrayTypeName(yytext));
107+
yylval.str =MapArrayTypeName(yytext);
108108
return(ID);
109109
}
110110
{id}{

‎src/backend/bootstrap/bootstrap.c

Lines changed: 13 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1016,38 +1016,33 @@ AllocateAttribute(void)
10161016
returnattribute;
10171017
}
10181018

1019-
/* ----------------
1019+
/*
10201020
*MapArrayTypeName
1021-
* XXX arrays of "basetype" are always "_basetype".
1022-
* this is an evil hack inherited from rel. 3.1.
1023-
* XXX array dimension is thrown away because we
1024-
* don't support fixed-dimension arrays. again,
1025-
* sickness from 3.1.
10261021
*
1027-
* the string passed in must have a '[' character in it
1022+
* Given a type name, produce the corresponding array type name by prepending
1023+
* '_' and truncating as needed to fit in NAMEDATALEN-1 bytes. This is only
1024+
* used in bootstrap mode, so we can get away with assuming that the input is
1025+
* ASCII and we don't need multibyte-aware truncation.
10281026
*
1029-
*thestringreturned is a pointer to static storage and should NOT
1030-
* be freed by the CALLER.
1031-
*----------------
1027+
*The givenstringnormally ends with '[]' or '[digits]'; we discard that.
1028+
*
1029+
*The result is a palloc'd string.
10321030
*/
10331031
char*
1034-
MapArrayTypeName(char*s)
1032+
MapArrayTypeName(constchar*s)
10351033
{
10361034
inti,
10371035
j;
1038-
staticcharnewStr[NAMEDATALEN];/* array type names < NAMEDATALEN long */
1036+
charnewStr[NAMEDATALEN];
10391037

1040-
if (s==NULL||s[0]=='\0')
1041-
returns;
1042-
1043-
j=1;
10441038
newStr[0]='_';
1045-
for (i=0;i<NAMEDATALEN-1&&s[i]!='[';i++,j++)
1039+
j=1;
1040+
for (i=0;i<NAMEDATALEN-2&&s[i]!='[';i++,j++)
10461041
newStr[j]=s[i];
10471042

10481043
newStr[j]='\0';
10491044

1050-
returnnewStr;
1045+
returnpstrdup(newStr);
10511046
}
10521047

10531048

‎src/include/bootstrap/bootstrap.h

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ extern void InsertOneTuple(Oid objectid);
5151
externvoidInsertOneValue(char*value,inti);
5252
externvoidInsertOneNull(inti);
5353

54-
externchar*MapArrayTypeName(char*s);
54+
externchar*MapArrayTypeName(constchar*s);
5555

5656
externvoidindex_register(Oidheap,Oidind,IndexInfo*indexInfo);
5757
externvoidbuild_indices(void);

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp