Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uEqEv-00DmvZ-M8 for pgsql-bugs@arkaria.postgresql.org; Tue, 13 May 2025 14:04:14 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1uEqEu-005X9S-1b for pgsql-bugs@arkaria.postgresql.org; Tue, 13 May 2025 14:04:12 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uEPpP-00Erda-Mp for pgsql-bugs@lists.postgresql.org; Mon, 12 May 2025 09:52:07 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1uEPpN-001UPJ-0D for pgsql-bugs@lists.postgresql.org; Mon, 12 May 2025 09:52:07 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Message-ID:Date:Reply-To:Cc:From:To:Subject: MIME-Version:Content-Type:Sender:Content-Transfer-Encoding:Content-ID: Content-Description:In-Reply-To:References; bh=T9VQ8oiAui0fqV1Yf9Q/PQLumy7oA2StBvs1DTjOikA=; b=H6EBZyg6w03uFF5x1KpJUdXMb1 92eQUGtQigZfN2CXtSy2VDGMWl01o5Zp6DGr0c0ohp4yQxvFC5mAxDG9f2bVK3PpvpqJKXmq283hD rEpjg+MfLOkn37ns/SJfXaKv/Fpswkmhd35o3+WUEXs0FUT6beUNjBStD/FoKWl+zJl9jelHnoY2l gRsmU7CZ1VCaxPLpXL9FzMzyp8TcxlJPjNV3IcSoC/g6udjfX8KAwE/+5FTouBJALKa18zoIygwaI b9XmnUfY2/u+NqXFKC/8c00MMyTY6/YJZsCfFgFCiQEkxiJijfS4kbECTbuD6LsMZSsy1wDl7DNrk VuLpVRyw==; Received: from wrigleys.postgresql.org ([2a02:16a8:dc51::60]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uEPpL-0040Yn-KQ for pgsql-bugs@lists.postgresql.org; Mon, 12 May 2025 09:52:04 +0000 Received: from localhost ([127.0.0.1] helo=wrigleys.postgresql.org) by wrigleys.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1uEPpK-00HIH9-9Q for pgsql-bugs@lists.postgresql.org; Mon, 12 May 2025 09:52:02 +0000 Content-Type: multipart/mixed; boundary="===============8968771444719312576==" MIME-Version: 1.0 Subject: BUG #18925: Heap-buffer-overflow: pglz_compress with pglz_stategy_always To: pgsql-bugs@lists.postgresql.org From: PG Bug reporting form Cc: stasos24@gmail.com Reply-To: stasos24@gmail.com, pgsql-bugs@lists.postgresql.org Date: Mon, 12 May 2025 09:51:21 +0000 Message-ID: <18925-3b7ab7c50b77c53d@postgresql.org> X-Auto-Response-Suppress: All Auto-Submitted: auto-generated List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============8968771444719312576== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 VGhlIGZvbGxvd2luZyBidWcgaGFzIGJlZW4gbG9nZ2VkIG9uIHRoZSB3ZWJzaXRlOgoKQnVnIHJl ZmVyZW5jZTogICAgICAxODkyNQpMb2dnZWQgYnk6ICAgICAgICAgIFN0YW5pc2xhdiBPc2lwb3YK RW1haWwgYWRkcmVzczogICAgICBzdGFzb3MyNEBnbWFpbC5jb20KUG9zdGdyZVNRTCB2ZXJzaW9u OiAxNy41Ck9wZXJhdGluZyBzeXN0ZW06ICAgVWJ1bnR1IDIyCkRlc2NyaXB0aW9uOiAgICAgICAg CgpBbHRob3VnaCBwZ2x6X2NvbXByZXNzIGlzIG5vdCB1c2VkIHdpdGggcGdsel9zdGF0ZWd5X2Fs d2F5cy4KSXQgbWlnaHQgYmUgdXNlZnVsIGluIGZ1dHVyZQpTb3VyY2UgY29kZToKYGBgCiNpbmNs dWRlICJwb3N0Z3Jlcy5oIgojaW5jbHVkZSAiY29tbW9uL3BnX2x6Y29tcHJlc3MuaCIKI2luY2x1 ZGUgIm1iL3BnX3djaGFyLmgiCiNpbmNsdWRlICJ1dGlscy9tZW11dGlscy5oIgojaW5jbHVkZSAi dXRpbHMvbWVtZGVidWcuaCIKI2luY2x1ZGUgIm1pc2NhZG1pbi5oIgpleHRlcm4gcGdfc3RhY2tf YmFzZV90IHNldF9zdGFja19iYXNlKHZvaWQpOwppbnQgRnV6emVySW5pdGlhbGl6ZShjaGFyICpk Ym5hbWUsIGNoYXIgKioqYXJndik7CmV4dGVybiBib29sICAgICAgICAgICAgIGxvZ19jaGVja3Bv aW50czsKaW50IExMVk1GdXp6ZXJJbml0aWFsaXplKGludCAqYXJnYywgY2hhciAqKiphcmd2KSB7 CiAgICAgICAgRnV6emVySW5pdGlhbGl6ZSgiY29tcHJlc3NfZGIiLCBhcmd2KTsKICAgICAgICBy ZXR1cm4gMDsKfQovKgoqKiBNYWluIGVudHJ5IHBvaW50LiAgVGhlIGZ1enplciBpbnZva2VzIHRo aXMgZnVuY3Rpb24gd2l0aCBlYWNoCioqIGZ1enplZCBpbnB1dC4KKi8KaW50IExMVk1GdXp6ZXJU ZXN0T25lSW5wdXQoY29uc3QgdWludDhfdCogZGF0YSwgc2l6ZV90IHNpemUpIHsKICAgICAgICBp ZiAoc2l6ZSA8IDEpIHJldHVybiAxOwogICAgICAgIGxvZ19jaGVja3BvaW50cyA9IGZhbHNlOwog ICAgICAgIHNpZ2ptcF9idWYgbG9jYWxfc2lnam1wX2J1ZjsKICAgICAgICBjaGFyICpidWZmZXI7 CiAgICAgICAgY2hhciAqY29tcDsKICAgICAgICBjaGFyICpkZWNvbXA7CiAgICAgICAgaW50IGNv bXBfYnl0ZXM7CiAgICAgICAgYnVmZmVyID0gKGNoYXIgKikgY2FsbG9jKHNpemUrMSwgc2l6ZW9m KGNoYXIpKTsKICAgICAgICBtZW1jcHkoYnVmZmVyLCBkYXRhLCBzaXplKTsKICAgICAgICBjb21w ID0gKGNoYXIgKikgY2FsbG9jKHNpemUrMSwgc2l6ZW9mKGNoYXIpKTsKICAgICAgICBkZWNvbXAg PSAoY2hhciAqKSBjYWxsb2Moc2l6ZSsxLCBzaXplb2YoY2hhcikpOwogICAgICAgIE1lbW9yeUNv bnRleHRJbml0KCk7CiAgICAgICAgc2V0X3N0YWNrX2Jhc2UoKTsKICAgICAgICBpZighc2lnc2V0 am1wKGxvY2FsX3NpZ2ptcF9idWYsMCkpewogICAgICAgICAgICAgICAgZXJyb3JfY29udGV4dF9z dGFjayA9IE5VTEw7CiAgICAgICAgICAgICAgICBjb21wX2J5dGVzID0gcGdsel9jb21wcmVzcyhi dWZmZXIsIHNpemUgKyAxLCBjb21wLApQR0xaX3N0cmF0ZWd5X2Fsd2F5cyk7CiAgICAgICAgICAg ICAgICBwZ2x6X2RlY29tcHJlc3MoY29tcCwgY29tcF9ieXRlcywgZGVjb21wLAogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHNpemUrMSwgZmFsc2UpOwogICAgICAgIH0KICAgICAgICBm cmVlKGJ1ZmZlcik7CiAgICAgICAgZnJlZShjb21wKTsKICAgICAgICBmcmVlKGRlY29tcCk7CiAg ICAgICAgRmx1c2hFcnJvclN0YXRlKCk7CiAgICAgICAgTWVtb3J5Q29udGV4dFJlc2V0KFRvcE1l bW9yeUNvbnRleHQpOwogICAgICAgIFRvcE1lbW9yeUNvbnRleHQtPmlkZW50ID0gTlVMTDsKICAg ICAgICBUb3BNZW1vcnlDb250ZXh0LT5tZXRob2RzLT5kZWxldGVfY29udGV4dChUb3BNZW1vcnlD b250ZXh0KTsKICAgICAgICBWQUxHUklORF9ERVNUUk9ZX01FTVBPT0woVG9wTWVtb3J5Q29udGV4 dCk7CiAgICAgICAgcmV0dXJuIDA7Cn0KYGBgCklucHV0OgpgYGAKWlpa4paSWkMKYGBgCkFzYW4g UmVwb3J0Ogo9PTcxMDE9PUVSUk9SOiBBZGRyZXNzU2FuaXRpemVyOiBoZWFwLWJ1ZmZlci1vdmVy ZmxvdyBvbiBhZGRyZXNzCjB4NjAyMDAwMDExYTNhIGF0IHBjIDB4MDAwMDAyNTkzYzI5IGJwIDB4 N2ZmZjcyNzdmODUwIHNwIDB4N2ZmZjcyNzdmODQ4CldSSVRFIG9mIHNpemUgMSBhdCAweDYwMjAw MDAxMWEzYSB0aHJlYWQgVDAKICAgICMwIDB4MjU5M2MyOCBpbiBwZ2x6X2NvbXByZXNzIC9kYi9z cmMvY29tbW9uL3BnX2x6Y29tcHJlc3MuYzo2NTY6NAogICAgIzEgMHg1NzUxYzEgaW4gTExWTUZ1 enplclRlc3RPbmVJbnB1dCAoL2Z1enovY29tcHJlc3NfZnV6emVyKzB4NTc1MWMxKQogICAgIzIg MHg0YThkMjMgaW4gZnV6emVyOjpGdXp6ZXI6OkV4ZWN1dGVDYWxsYmFjayh1bnNpZ25lZCBjaGFy IGNvbnN0KiwKdW5zaWduZWQgbG9uZykgKC9mdXp6L2NvbXByZXNzX2Z1enplcisweDRhOGQyMykK ICAgICMzIDB4NDkxYjZmIGluIGZ1enplcjo6UnVuT25lVGVzdChmdXp6ZXI6OkZ1enplciosIGNo YXIgY29uc3QqLCB1bnNpZ25lZApsb25nKSAoL2Z1enovY29tcHJlc3NfZnV6emVyKzB4NDkxYjZm KQogICAgIzQgMHg0OTdkZjAgaW4gZnV6emVyOjpGdXp6ZXJEcml2ZXIoaW50KiwgY2hhcioqKiwg aW50ICgqKSh1bnNpZ25lZCBjaGFyCmNvbnN0KiwgdW5zaWduZWQgbG9uZykpICgvZnV6ei9jb21w cmVzc19mdXp6ZXIrMHg0OTdkZjApCiAgICAjNSAweDRjMzk2MiBpbiBtYWluICgvZnV6ei9jb21w cmVzc19mdXp6ZXIrMHg0YzM5NjIpCiAgICAjNiAweDdmNWIyYmY1NWQ4ZiBpbiBfX2xpYmNfc3Rh cnRfY2FsbF9tYWluCmNzdS8uLi9zeXNkZXBzL25wdGwvbGliY19zdGFydF9jYWxsX21haW4uaDo1 ODoxNgogICAgIzcgMHg3ZjViMmJmNTVlM2YgaW4gX19saWJjX3N0YXJ0X21haW4gY3N1Ly4uL2Nz dS9saWJjLXN0YXJ0LmM6MzkyOjMKICAgICM4IDB4NDhiZWI0IGluIF9zdGFydCAoL2Z1enovY29t cHJlc3NfZnV6emVyKzB4NDhiZWI0KQoweDYwMjAwMDAxMWEzYSBpcyBsb2NhdGVkIDAgYnl0ZXMg dG8gdGhlIHJpZ2h0IG9mIDEwLWJ5dGUgcmVnaW9uClsweDYwMjAwMDAxMWEzMCwweDYwMjAwMDAx MWEzYSkKYWxsb2NhdGVkIGJ5IHRocmVhZCBUMCBoZXJlOgogICAgIzAgMHg1NDA5MjIgaW4gX19p bnRlcmNlcHRvcl9jYWxsb2MgKC9mdXp6L2NvbXByZXNzX2Z1enplcisweDU0MDkyMikKICAgICMx IDB4NTc1MGExIGluIExMVk1GdXp6ZXJUZXN0T25lSW5wdXQgKC9mdXp6L2NvbXByZXNzX2Z1enpl cisweDU3NTBhMSkKICAgICMyIDB4NGE4ZDIzIGluIGZ1enplcjo6RnV6emVyOjpFeGVjdXRlQ2Fs bGJhY2sodW5zaWduZWQgY2hhciBjb25zdCosCnVuc2lnbmVkIGxvbmcpICgvZnV6ei9jb21wcmVz c19mdXp6ZXIrMHg0YThkMjMpCiAgICAjMyAweDQ5MWI2ZiBpbiBmdXp6ZXI6OlJ1bk9uZVRlc3Qo ZnV6emVyOjpGdXp6ZXIqLCBjaGFyIGNvbnN0KiwgdW5zaWduZWQKbG9uZykgKC9mdXp6L2NvbXBy ZXNzX2Z1enplcisweDQ5MWI2ZikKICAgICM0IDB4NDk3ZGYwIGluIGZ1enplcjo6RnV6emVyRHJp dmVyKGludCosIGNoYXIqKiosIGludCAoKikodW5zaWduZWQgY2hhcgpjb25zdCosIHVuc2lnbmVk IGxvbmcpKSAoL2Z1enovY29tcHJlc3NfZnV6emVyKzB4NDk3ZGYwKQogICAgIzUgMHg0YzM5NjIg aW4gbWFpbiAoL2Z1enovY29tcHJlc3NfZnV6emVyKzB4NGMzOTYyKQogICAgIzYgMHg3ZjViMmJm NTVkOGYgaW4gX19saWJjX3N0YXJ0X2NhbGxfbWFpbgpjc3UvLi4vc3lzZGVwcy9ucHRsL2xpYmNf c3RhcnRfY2FsbF9tYWluLmg6NTg6MTYKU1VNTUFSWTogQWRkcmVzc1Nhbml0aXplcjogaGVhcC1i dWZmZXItb3ZlcmZsb3cKL2RiL3NyYy9jb21tb24vcGdfbHpjb21wcmVzcy5jOjY1Njo0IGluIHBn bHpfY29tcHJlc3MKU2hhZG93IGJ5dGVzIGFyb3VuZCB0aGUgYnVnZ3kgYWRkcmVzczoKICAweDBj MDQ3ZmZmYTJmMDogZmEgZmEgMDAgMDAgZmEgZmEgMDAgMDAgZmEgZmEgMDAgMDAgZmEgZmEgMDAg MDAKICAweDBjMDQ3ZmZmYTMwMDogZmEgZmEgMDAgMDAgZmEgZmEgMDAgMDAgZmEgZmEgMDAgMDAg ZmEgZmEgMDAgMDAKICAweDBjMDQ3ZmZmYTMxMDogZmEgZmEgMDAgMDAgZmEgZmEgMDAgMDAgZmEg ZmEgMDAgMDAgZmEgZmEgMDAgMDAKICAweDBjMDQ3ZmZmYTMyMDogZmEgZmEgMDAgMDQgZmEgZmEg MDAgMDUgZmEgZmEgMDAgMDMgZmEgZmEgMDAgMDAKICAweDBjMDQ3ZmZmYTMzMDogZmEgZmEgMDAg MDAgZmEgZmEgMDAgMDAgZmEgZmEgMDAgMDEgZmEgZmEgMDAgMDEKPT4weDBjMDQ3ZmZmYTM0MDog ZmEgZmEgMDAgMDIgZmEgZmEgMDBbMDJdZmEgZmEgMDAgMDIgZmEgZmEgZmEgZmEKICAweDBjMDQ3 ZmZmYTM1MDogZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEK ICAweDBjMDQ3ZmZmYTM2MDogZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEg ZmEgZmEgZmEKICAweDBjMDQ3ZmZmYTM3MDogZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEg ZmEgZmEgZmEgZmEgZmEgZmEKICAweDBjMDQ3ZmZmYTM4MDogZmEgZmEgZmEgZmEgZmEgZmEgZmEg ZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEKICAweDBjMDQ3ZmZmYTM5MDogZmEgZmEgZmEgZmEg ZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEgZmEKU2hhZG93IGJ5dGUgbGVnZW5kIChv bmUgc2hhZG93IGJ5dGUgcmVwcmVzZW50cyA4IGFwcGxpY2F0aW9uIGJ5dGVzKToKICBBZGRyZXNz YWJsZTogICAgICAgICAgIDAwCiAgUGFydGlhbGx5IGFkZHJlc3NhYmxlOiAwMSAwMiAwMyAwNCAw NSAwNiAwNwogIEhlYXAgbGVmdCByZWR6b25lOiAgICAgICBmYQogIEZyZWVkIGhlYXAgcmVnaW9u OiAgICAgICBmZAogIFN0YWNrIGxlZnQgcmVkem9uZTogICAgICBmMQogIFN0YWNrIG1pZCByZWR6 b25lOiAgICAgICBmMgogIFN0YWNrIHJpZ2h0IHJlZHpvbmU6ICAgICBmMwogIFN0YWNrIGFmdGVy IHJldHVybjogICAgICBmNQogIFN0YWNrIHVzZSBhZnRlciBzY29wZTogICBmOAogIEdsb2JhbCBy ZWR6b25lOiAgICAgICAgICBmOQogIEdsb2JhbCBpbml0IG9yZGVyOiAgICAgICBmNgogIFBvaXNv bmVkIGJ5IHVzZXI6ICAgICAgICBmNwogIENvbnRhaW5lciBvdmVyZmxvdzogICAgICBmYwogIEFy cmF5IGNvb2tpZTogICAgICAgICAgICBhYwogIEludHJhIG9iamVjdCByZWR6b25lOiAgICBiYgog IEFTYW4gaW50ZXJuYWw6ICAgICAgICAgICBmZQogIExlZnQgYWxsb2NhIHJlZHpvbmU6ICAgICBj YQogIFJpZ2h0IGFsbG9jYSByZWR6b25lOiAgICBjYgo9PTcxMDE9PUFCT1JUSU5HCgo= --===============8968771444719312576==--