postgres.git / summary / log / commit / refs

commit    40ddb8db9f2c62aed5025aaf503e188f7d1f27af
Author:   Michael Paquier <michael@paquier.xyz>
Date:     Mon Sep 04 05:55:57 2023 +0000
First released in: 17.0, 11.22, 12.17, 13.13, 14.10, 15.5, 16.0

    Fix out-of-bound read in gtsvector_picksplit()
    
    This could lead to an imprecise choice when splitting an index page of a
    GiST index on a tsvector, deciding which entries should remain on the
    old page and which entries should move to a new page.
    
    This is wrong since tsearch2 has been moved into core with commit
    140d4ebcb46e, so backpatch all the way down.  This error has been
    spotted by valgrind.
    
    Author: Alexander Lakhin
    Discussion: https://postgr.es/m/17950-6c80a8d2b94ec695@postgresql.org
    Backpatch-through: 11


 src/backend/utils/adt/tsgistidx.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/backend/utils/adt/tsgistidx.c b/src/backend/utils/adt/tsgistidx.c
index 4f256260fd1..3f50324808c 100644
--- a/src/backend/utils/adt/tsgistidx.c
+++ b/src/backend/utils/adt/tsgistidx.c
@@ -728,7 +728,7 @@ gtsvector_picksplit(PG_FUNCTION_ARGS)
 				size_alpha = 0;
 			else
 				size_alpha = SIGLENBIT - sizebitvec(
-													(cache[j].allistrue) ? GETSIGN(datum_l) : GETSIGN(cache[j].sign)
+													(cache[j].allistrue) ? GETSIGN(datum_l) : cache[j].sign
 					);
 		}
 		else
@@ -740,7 +740,7 @@ gtsvector_picksplit(PG_FUNCTION_ARGS)
 				size_beta = 0;
 			else
 				size_beta = SIGLENBIT - sizebitvec(
-												   (cache[j].allistrue) ? GETSIGN(datum_r) : GETSIGN(cache[j].sign)
+												   (cache[j].allistrue) ? GETSIGN(datum_r) : cache[j].sign
 					);
 		}
 		else


[parent: a67cf941151f]