agora inbox for pgpool-committers@postgresql.orghelp / color / mirror / Atom feed
pgpool: Fix response buffer pointer advancement in do_error_execute_com 6+ messages / 1 participants [nested] [flat]
* pgpool: Fix response buffer pointer advancement in do_error_execute_com @ 2026-09-18 05:09 Taiki Koshino <koshino@sraoss.co.jp> 0 siblings, 0 replies; 6+ messages in thread From: Taiki Koshino @ 2026-09-18 05:09 UTC (permalink / raw) To: pgpool-committers@lists.postgresql.org Fix response buffer pointer advancement in do_error_execute_command The response body is copied len bytes, but the buffer pointer was advanced by sizeof(len). When a zero-length response body was received, the pointer advanced by four bytes even though no body was copied, causing subsequent saved responses to be corrupted. Advance the pointer by len in both protocol v2 and v3 paths. Author: Taiki Koshino <koshino@srasoss.co.jp> Discussion: https://www.postgresql.org/message-id/OS9P286MB6486821B656397FBCD72BE5394BF2%40OS9P286MB6486.JPNP286... Backpatch-through: v4.3 Branch ------ master Details ------- https://git.postgresql.org/gitweb?p=pgpool2.git;a=commitdiff;h=9bc49568bc93261143947c1cadf34f184d1f1... Modified Files -------------- src/protocol/pool_process_query.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgpool: Fix response buffer pointer advancement in do_error_execute_com @ 2026-09-18 05:09 Taiki Koshino <koshino@sraoss.co.jp> 0 siblings, 0 replies; 6+ messages in thread From: Taiki Koshino @ 2026-09-18 05:09 UTC (permalink / raw) To: pgpool-committers@lists.postgresql.org Fix response buffer pointer advancement in do_error_execute_command The response body is copied len bytes, but the buffer pointer was advanced by sizeof(len). When a zero-length response body was received, the pointer advanced by four bytes even though no body was copied, causing subsequent saved responses to be corrupted. Advance the pointer by len in both protocol v2 and v3 paths. Author: Taiki Koshino <koshino@srasoss.co.jp> Discussion: https://www.postgresql.org/message-id/OS9P286MB6486821B656397FBCD72BE5394BF2%40OS9P286MB6486.JPNP286... Backpatch-through: v4.3 Branch ------ V4_7_STABLE Details ------- https://git.postgresql.org/gitweb?p=pgpool2.git;a=commitdiff;h=c56701d05b346e5b63325b685732d4a6dd98b... Modified Files -------------- src/protocol/pool_process_query.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgpool: Fix response buffer pointer advancement in do_error_execute_com @ 2026-09-18 05:10 Taiki Koshino <koshino@sraoss.co.jp> 0 siblings, 0 replies; 6+ messages in thread From: Taiki Koshino @ 2026-09-18 05:10 UTC (permalink / raw) To: pgpool-committers@lists.postgresql.org Fix response buffer pointer advancement in do_error_execute_command The response body is copied len bytes, but the buffer pointer was advanced by sizeof(len). When a zero-length response body was received, the pointer advanced by four bytes even though no body was copied, causing subsequent saved responses to be corrupted. Advance the pointer by len in both protocol v2 and v3 paths. Author: Taiki Koshino <koshino@srasoss.co.jp> Discussion: https://www.postgresql.org/message-id/OS9P286MB6486821B656397FBCD72BE5394BF2%40OS9P286MB6486.JPNP286... Backpatch-through: v4.3 Branch ------ V4_6_STABLE Details ------- https://git.postgresql.org/gitweb?p=pgpool2.git;a=commitdiff;h=2da451f98934e749a3b791664654acb3ace67... Modified Files -------------- src/protocol/pool_process_query.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgpool: Fix response buffer pointer advancement in do_error_execute_com @ 2026-09-18 05:10 Taiki Koshino <koshino@sraoss.co.jp> 0 siblings, 0 replies; 6+ messages in thread From: Taiki Koshino @ 2026-09-18 05:10 UTC (permalink / raw) To: pgpool-committers@lists.postgresql.org Fix response buffer pointer advancement in do_error_execute_command The response body is copied len bytes, but the buffer pointer was advanced by sizeof(len). When a zero-length response body was received, the pointer advanced by four bytes even though no body was copied, causing subsequent saved responses to be corrupted. Advance the pointer by len in both protocol v2 and v3 paths. Author: Taiki Koshino <koshino@srasoss.co.jp> Discussion: https://www.postgresql.org/message-id/OS9P286MB6486821B656397FBCD72BE5394BF2%40OS9P286MB6486.JPNP286... Backpatch-through: v4.3 Branch ------ V4_5_STABLE Details ------- https://git.postgresql.org/gitweb?p=pgpool2.git;a=commitdiff;h=9b916a79b8cbf6d723e03b47cd451e5b56582... Modified Files -------------- src/protocol/pool_process_query.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgpool: Fix response buffer pointer advancement in do_error_execute_com @ 2026-09-18 05:10 Taiki Koshino <koshino@sraoss.co.jp> 0 siblings, 0 replies; 6+ messages in thread From: Taiki Koshino @ 2026-09-18 05:10 UTC (permalink / raw) To: pgpool-committers@lists.postgresql.org Fix response buffer pointer advancement in do_error_execute_command The response body is copied len bytes, but the buffer pointer was advanced by sizeof(len). When a zero-length response body was received, the pointer advanced by four bytes even though no body was copied, causing subsequent saved responses to be corrupted. Advance the pointer by len in both protocol v2 and v3 paths. Author: Taiki Koshino <koshino@srasoss.co.jp> Discussion: https://www.postgresql.org/message-id/OS9P286MB6486821B656397FBCD72BE5394BF2%40OS9P286MB6486.JPNP286... Backpatch-through: v4.3 Branch ------ V4_4_STABLE Details ------- https://git.postgresql.org/gitweb?p=pgpool2.git;a=commitdiff;h=4b6b592e54b2d67b8944b66e9f4216732fe03... Modified Files -------------- src/protocol/pool_process_query.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgpool: Fix response buffer pointer advancement in do_error_execute_com @ 2026-09-18 05:10 Taiki Koshino <koshino@sraoss.co.jp> 0 siblings, 0 replies; 6+ messages in thread From: Taiki Koshino @ 2026-09-18 05:10 UTC (permalink / raw) To: pgpool-committers@lists.postgresql.org Fix response buffer pointer advancement in do_error_execute_command The response body is copied len bytes, but the buffer pointer was advanced by sizeof(len). When a zero-length response body was received, the pointer advanced by four bytes even though no body was copied, causing subsequent saved responses to be corrupted. Advance the pointer by len in both protocol v2 and v3 paths. Author: Taiki Koshino <koshino@srasoss.co.jp> Discussion: https://www.postgresql.org/message-id/OS9P286MB6486821B656397FBCD72BE5394BF2%40OS9P286MB6486.JPNP286... Backpatch-through: v4.3 Branch ------ V4_3_STABLE Details ------- https://git.postgresql.org/gitweb?p=pgpool2.git;a=commitdiff;h=83ac838ccdb4114fb098585ebe04f8c18982a... Modified Files -------------- src/protocol/pool_process_query.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) ^ permalink raw reply [nested|flat] 6+ messages in thread
end of thread, other threads:[~2026-09-18 05:10 UTC | newest] Thread overview: 6+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2026-09-18 05:09 pgpool: Fix response buffer pointer advancement in do_error_execute_com Taiki Koshino <koshino@sraoss.co.jp> 2026-09-18 05:09 pgpool: Fix response buffer pointer advancement in do_error_execute_com Taiki Koshino <koshino@sraoss.co.jp> 2026-09-18 05:10 pgpool: Fix response buffer pointer advancement in do_error_execute_com Taiki Koshino <koshino@sraoss.co.jp> 2026-09-18 05:10 pgpool: Fix response buffer pointer advancement in do_error_execute_com Taiki Koshino <koshino@sraoss.co.jp> 2026-09-18 05:10 pgpool: Fix response buffer pointer advancement in do_error_execute_com Taiki Koshino <koshino@sraoss.co.jp> 2026-09-18 05:10 pgpool: Fix response buffer pointer advancement in do_error_execute_com Taiki Koshino <koshino@sraoss.co.jp>
This inbox is served by agora; see mirroring instructions for how to clone and mirror all data and code used for this inbox