]> git.ipfire.org Git - thirdparty/postgresql.git/commit
Fix integer-overflow problem in intarray's g_int_decompress().
authorTom Lane <tgl@sss.pgh.pa.us>
Sun, 7 Jan 2024 20:19:50 +0000 (15:19 -0500)
committerTom Lane <tgl@sss.pgh.pa.us>
Sun, 7 Jan 2024 20:19:50 +0000 (15:19 -0500)
commit90e8b86fc52a4be21aec16abfb5dccfb819cc53e
treeacd07654922bc0440e3ed809f33beb98f45d7203
parent3bdaa8fc622f51ab2836314a9f087b6af81eef06
Fix integer-overflow problem in intarray's g_int_decompress().

An array element equal to INT_MAX gave this code indigestion,
causing an infinite loop that surely ended in SIGSEGV.  We fixed
some nearby problems awhile ago (cf 757c5182f) but missed this.

Report and diagnosis by Alexander Lakhin (bug #18273); patch by me

Discussion: https://postgr.es/m/18273-9a832d1da122600c@postgresql.org
contrib/intarray/_int_gist.c
contrib/intarray/data/test__int.data
contrib/intarray/expected/_int.out
contrib/intarray/sql/_int.sql