NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commiteb8c9f0

committed

Fix use of dangling pointer in heap_delete() when logging replica identity

When logging the replica identity of a deleted tuple, XLOG_HEAP_DELETErecords include references of the old tuple. Its data is stored in anintermediate variable used to register this information for the WALrecord, but this variable gets away from the stack when the record getsactually inserted.Spotted by clang's AddressSanitizer.Author: Stas KelvishDiscussion:https://postgr.es/m/085C8825-AD86-4E93-AF80-E26CDF03D1EA@postgrespro.ruBackpatch-through: 9.4

1 parentf60a0e9 commiteb8c9f0Copy full SHA for eb8c9f0

File tree

1 file changed

-2

lines changed

src/backend/access/heap
- heapam.c

1 file changed

-2

lines changed

`‎src/backend/access/heap/heapam.c`

Lines changed: 1 addition & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -3039,6 +3039,7 @@ heap_delete(Relation relation, ItemPointer tid,`
`3039`	`3039`	`if (RelationNeedsWAL(relation))`
`3040`	`3040`	`{`
`3041`	`3041`	`xl_heap_deletexlrec;`
	`3042`	`+xl_heap_headerxlhdr;`
`3042`	`3043`	`XLogRecPtrrecptr;`
`3043`	`3044`
`3044`	`3045`	`/* For logical decode we need combocids to properly decode the catalog */`
`@@ -3073,8 +3074,6 @@ heap_delete(Relation relation, ItemPointer tid,`
`3073`	`3074`	`*/`
`3074`	`3075`	`if (old_key_tuple!=NULL)`
`3075`	`3076`	`{`
`3076`		`-xl_heap_headerxlhdr;`
`3077`		`-`
`3078`	`3077`	`xlhdr.t_infomask2=old_key_tuple->t_data->t_infomask2;`
`3079`	`3078`	`xlhdr.t_infomask=old_key_tuple->t_data->t_infomask;`
`3080`	`3079`	`xlhdr.t_hoff=old_key_tuple->t_data->t_hoff;`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commiteb8c9f0

File tree

1 file changed

1 file changed

`‎src/backend/access/heap/heapam.c`

0 commit comments