pg.ddx.io  pgsql-bugs@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: PG Bug reporting form <noreply@postgresql.org>
To: pgsql-bugs@lists.postgresql.org
Cc: petrum@gmail.com
Subject: BUG #15312: Possible access to unintended variable in "postgres/src/backend/postmaster/pgstat.c" line 2698
Date: Tue, 07 Aug 2018 10:52:10 +0000
Message-ID: <153363913073.1303.6518849192351268091@wrigleys.postgresql.org> (raw)

The following bug has been logged on the website:

Bug reference:      15312
Logged by:          Petru-Florin Mihancea
Email address:      petrum@gmail.com
PostgreSQL version: Unsupported/Unknown
Operating system:   Macosx
Description:        

While experimenting with a CodeSonar plugin we develop, we noticed a
potential bug in file "postgres/src/backend/postmaster/pgstat.c" line 2698
function CreateSharedBackendStatus.

/* Create or attach to the shared activity buffer */
BackendActivityBufferSize = mul_size(pgstat_track_activity_query_size,
									 NumBackendStatSlots);
BackendActivityBuffer = (char *)
	ShmemInitStruct("Backend Activity Buffer",
					BackendActivityBufferSize,
					&found);
if (!found)
{
	MemSet(BackendActivityBuffer, 0, size); //HERE

	/* Initialize st_activity pointers. */
	buffer = BackendActivityBuffer;
	for (i = 0; i < NumBackendStatSlots; i++)
	{
		BackendStatusArray[i].st_activity_raw = buffer;
		buffer += pgstat_track_activity_query_size;
	}
}

Shouldn't BackendActivityBufferSize be accessed in the marked line instead
of size? 

Thanks,
Petru Florin Mihancea



view thread (3+ messages)  latest in thread

Message-ID: <153363913073.1303.6518849192351268091@wrigleys.postgresql.org>
Permalink:  ../153363913073.1303.6518849192351268091@wrigleys.postgresql.org/
Also on:    postgresql.org/message-id/153363913073.1303.6518849192351268091@wrigleys.postgresql.org

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-bugs@postgresql.org
  Cc: noreply@postgresql.org, pgsql-bugs@lists.postgresql.org, petrum@gmail.com
  Subject: Re: BUG #15312: Possible access to unintended variable in "postgres/src/backend/postmaster/pgstat.c" line 2698
  In-Reply-To: <153363913073.1303.6518849192351268091@wrigleys.postgresql.org>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox