pg.ddx.io  pgsql-bugs@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Erik Wienhold <ewie@ewie.name>
Cc: fuboat@outlook.com
Cc: pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #18617: PostgreSQL Server Subprocess Crashes by the XPATH Function Expression with Crafted Arguments
Date: Fri, 13 Sep 2024 12:32:23 -0400
Message-ID: <104996.1726245143@sss.pgh.pa.us> (raw)
In-Reply-To: <08a0ba98-2dec-4773-8bfd-9eaced528372@ewie.name>
References: <18617-1cee4d2ed1f4e7ae@postgresql.org>
	<08a0ba98-2dec-4773-8bfd-9eaced528372@ewie.name>

Erik Wienhold <ewie@ewie.name> writes:
> On 2024-09-13 14:31 +0200, PG Bug reporting form wrote:
>> SELECT XPATH(REPEAT('(', 100000), '<root/>');

> This looks a lot like https://gitlab.gnome.org/GNOME/libxml2/-/issues/137

Interesting.

> What is your libxml2 version?

It crashes with all the libxml2 versions I have at hand, the newest
being 2.13.3 from MacPorts --- which seems to be the latest per
https://download.gnome.org/sources/libxml2/

I wonder what became of the alleged fix.

			regards, tom lane





view thread (7+ messages)  latest in thread

Message-ID: <104996.1726245143@sss.pgh.pa.us>
Permalink:  ../104996.1726245143@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/104996.1726245143@sss.pgh.pa.us

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-bugs@postgresql.org
  Cc: tgl@sss.pgh.pa.us, ewie@ewie.name, fuboat@outlook.com, pgsql-bugs@lists.postgresql.org
  Subject: Re: BUG #18617: PostgreSQL Server Subprocess Crashes by the XPATH Function Expression with Crafted Arguments
  In-Reply-To: <104996.1726245143@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox