]> git.ipfire.org Git - thirdparty/postgresql.git/commitdiff
Avoid memory leak on error while parsing pg_stat_statements dump file
authorHeikki Linnakangas <heikki.linnakangas@iki.fi>
Fri, 27 Mar 2026 10:20:38 +0000 (12:20 +0200)
committerHeikki Linnakangas <heikki.linnakangas@iki.fi>
Fri, 27 Mar 2026 10:22:21 +0000 (12:22 +0200)
By using palloc() instead of raw malloc().

Reported-by: Gaurav Singh <gaurav.singh@yugabyte.com>
Reviewed-by: Lukas Fittl <lukas@fittl.com>
Reviewed-by: Daniel Gustafsson <daniel@yesql.se>
Discussion: https://www.postgresql.org/message-id/CAEcQ1bYR9s4eQLFDjzzJHU8fj-MTbmRpW-9J-r2gsCn+HEsynw@mail.gmail.com
Backpatch-through: 14

contrib/pg_stat_statements/pg_stat_statements.c

index 93d238ba34ade72c832b06bf9762fcd671bc2275..8d71ed71321cc3042e2632749cb7f8d3cf5fdf68 100644 (file)
@@ -785,7 +785,7 @@ pgss_shmem_shutdown(int code, Datum arg)
        if (fwrite(&pgss->stats, sizeof(pgssGlobalStats), 1, file) != 1)
                goto error;
 
-       free(qbuffer);
+       pfree(qbuffer);
        qbuffer = NULL;
 
        if (FreeFile(file))
@@ -810,7 +810,7 @@ error:
                         errmsg("could not write file \"%s\": %m",
                                        PGSS_DUMP_FILE ".tmp")));
        if (qbuffer)
-               free(qbuffer);
+               pfree(qbuffer);
        if (file)
                FreeFile(file);
        unlink(PGSS_DUMP_FILE ".tmp");
@@ -1670,7 +1670,7 @@ pg_stat_statements_internal(FunctionCallInfo fcinfo,
                        pgss->gc_count != gc_count)
                {
                        if (qbuffer)
-                               free(qbuffer);
+                               pfree(qbuffer);
                        qbuffer = qtext_load_file(&qbuffer_size);
                }
        }
@@ -1855,7 +1855,7 @@ pg_stat_statements_internal(FunctionCallInfo fcinfo,
        LWLockRelease(pgss->lock);
 
        if (qbuffer)
-               free(qbuffer);
+               pfree(qbuffer);
 }
 
 /* Number of output arguments (columns) for pg_stat_statements_info */
@@ -2163,7 +2163,7 @@ error:
 }
 
 /*
- * Read the external query text file into a malloc'd buffer.
+ * Read the external query text file into a palloc'd buffer.
  *
  * Returns NULL (without throwing an error) if unable to read, eg
  * file not there or insufficient memory.
@@ -2205,7 +2205,7 @@ qtext_load_file(Size *buffer_size)
 
        /* Allocate buffer; beware that off_t might be wider than size_t */
        if (stat.st_size <= MaxAllocHugeSize)
-               buf = (char *) malloc(stat.st_size);
+               buf = (char *) palloc_extended(stat.st_size, MCXT_ALLOC_HUGE | MCXT_ALLOC_NO_OOM);
        else
                buf = NULL;
        if (buf == NULL)
@@ -2244,7 +2244,7 @@ qtext_load_file(Size *buffer_size)
                                                (errcode_for_file_access(),
                                                 errmsg("could not read file \"%s\": %m",
                                                                PGSS_TEXT_FILE)));
-                       free(buf);
+                       pfree(buf);
                        CloseTransientFile(fd);
                        return NULL;
                }
@@ -2459,7 +2459,7 @@ gc_qtexts(void)
        else
                pgss->mean_query_len = ASSUMED_LENGTH_INIT;
 
-       free(qbuffer);
+       pfree(qbuffer);
 
        /*
         * OK, count a garbage collection cycle.  (Note: even though we have
@@ -2477,7 +2477,7 @@ gc_fail:
        if (qfile)
                FreeFile(qfile);
        if (qbuffer)
-               free(qbuffer);
+               pfree(qbuffer);
 
        /*
         * Since the contents of the external file are now uncertain, mark all